| ofs | hex dump | ascii |
|---|---|---|
| 0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | !<arch>./...............10984929 |
| 0020 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 35 34 37 30 20 20 20 | 91..............0.......75470... |
| 0040 | 20 20 60 0a 00 00 0a bd 00 02 4e 26 00 02 50 48 00 02 51 7e 00 02 5e 88 00 02 5e 88 00 02 62 80 | ..`.......N&..PH..Q~..^...^...b. |
| 0060 | 00 02 62 80 00 02 5e f4 00 02 5e f4 00 02 62 12 00 02 62 12 00 02 5f d8 00 02 5f d8 00 02 60 4a | ..b...^...^...b...b..._..._...`J |
| 0080 | 00 02 60 4a 00 02 61 9e 00 02 61 9e 00 02 61 30 00 02 61 30 00 02 60 be 00 02 60 be 00 02 5f 5c | ..`J..a...a...a0..a0..`...`..._\ |
| 00a0 | 00 02 5f 5c 00 02 5b 9a 00 02 5b 9a 00 02 5c 02 00 02 5c 02 00 02 5c 66 00 02 5c 66 00 04 9e 5c | .._\..[...[...\...\...\f..\f...\ |
| 00c0 | 00 04 9e 5c 00 04 9e c2 00 04 9e c2 00 02 5c cc 00 02 5c cc 00 02 5d 3e 00 02 5d 3e 00 02 62 f0 | ...\..........\...\...]>..]>..b. |
| 00e0 | 00 02 62 f0 00 02 5e 16 00 02 5e 16 00 02 5d a2 00 02 5d a2 00 02 72 0c 00 02 72 0c 00 02 72 7a | ..b...^...^...]...]...r...r...rz |
| 0100 | 00 02 72 7a 00 02 72 ee 00 02 72 ee 00 02 71 92 00 02 71 92 00 02 73 da 00 02 73 da 00 02 76 f8 | ..rz..r...r...q...q...s...s...v. |
| 0120 | 00 02 76 f8 00 02 76 8c 00 02 76 8c 00 02 77 e4 00 02 77 e4 00 02 79 3a 00 02 79 3a 00 02 78 cc | ..v...v...v...w...w...y:..y:..x. |
| 0140 | 00 02 78 cc 00 02 78 56 00 02 78 56 00 02 7a 22 00 02 7a 22 00 02 7a 8c 00 02 7a 8c 00 02 7b e0 | ..x...xV..xV..z"..z"..z...z...{. |
| 0160 | 00 02 7b e0 00 02 74 46 00 02 74 46 00 02 7a f8 00 02 7a f8 00 02 7b 6e 00 02 7b 6e 00 02 7c c2 | ..{...tF..tF..z...z...{n..{n..|. |
| 0180 | 00 02 7c c2 00 02 7d aa 00 02 7d aa 00 02 7e f2 00 02 7e f2 00 02 82 4e 00 02 82 4e 00 02 7e 10 | ..|...}...}...~...~....N...N..~. |
| 01a0 | 00 02 7e 10 00 02 81 ce 00 02 81 ce 00 02 82 c0 00 02 82 c0 00 02 83 2e 00 02 83 2e 00 02 84 16 | ..~............................. |
| 01c0 | 00 02 84 16 00 02 84 7e 00 02 84 7e 00 02 76 12 00 02 76 12 00 02 7c 4e 00 02 7c 4e 00 02 85 ce | .......~...~..v...v...|N..|N.... |
| 01e0 | 00 02 85 ce 00 02 86 3a 00 02 86 3a 00 02 85 64 00 02 85 64 00 03 06 4c 00 03 06 4c 00 03 06 b4 | .......:...:...d...d...L...L.... |
| 0200 | 00 03 06 b4 00 03 07 1c 00 03 07 1c 00 03 07 86 00 03 07 86 00 03 07 f0 00 03 07 f0 00 03 08 58 | ...............................X |
| 0220 | 00 03 08 58 00 03 08 ce 00 03 08 ce 00 03 09 3a 00 03 09 3a 00 03 09 a8 00 03 09 a8 00 03 0a 1e | ...X...........:...:............ |
| 0240 | 00 03 0a 1e 00 03 0b 84 00 03 0b 84 00 03 0c 06 00 03 0c 06 00 03 0c 78 00 03 0c 78 00 03 0c ec | .......................x...x.... |
| 0260 | 00 03 0c ec 00 03 0d 64 00 03 0d 64 00 03 0d d4 00 03 0d d4 00 03 0e 46 00 03 0e 46 00 03 11 ce | .......d...d...........F...F.... |
| 0280 | 00 03 11 ce 00 03 0e bc 00 03 0e bc 00 03 0f 20 00 03 0f 20 00 03 0f 8e 00 03 0f 8e 00 03 0f fe | ................................ |
| 02a0 | 00 03 0f fe 00 03 10 76 00 03 10 76 00 03 10 e6 00 03 10 e6 00 03 11 58 00 03 11 58 00 03 14 80 | .......v...v...........X...X.... |
| 02c0 | 00 03 14 80 00 03 14 f4 00 03 14 f4 00 03 15 62 00 03 15 62 00 03 15 de 00 03 15 de 00 03 16 54 | ...............b...b...........T |
| 02e0 | 00 03 16 54 00 03 16 c0 00 03 16 c0 00 03 17 2a 00 03 17 2a 00 03 17 9e 00 03 17 9e 00 03 18 14 | ...T...........*...*............ |
| 0300 | 00 03 18 14 00 03 18 8c 00 03 18 8c 00 03 19 6e 00 03 19 6e 00 03 1a 5a 00 03 1a 5a 00 03 19 e0 | ...............n...n...Z...Z.... |
| 0320 | 00 03 19 e0 00 03 1a ce 00 03 1a ce 00 03 1b 44 00 03 1b 44 00 03 1b ac 00 03 1b ac 00 03 1c 1c | ...............D...D............ |
| 0340 | 00 03 1c 1c 00 03 1c 90 00 03 1c 90 00 03 1d 04 00 03 1d 04 00 03 1d 6e 00 03 1d 6e 00 03 1d d6 | .......................n...n.... |
| 0360 | 00 03 1d d6 00 03 1f 84 00 03 1f 84 00 03 1f f0 00 03 1f f0 00 03 20 6e 00 03 20 6e 00 03 20 e2 | .......................n...n.... |
| 0380 | 00 03 20 e2 00 03 21 50 00 03 21 50 00 03 21 ba 00 03 21 ba 00 03 23 02 00 03 23 02 00 03 23 6c | ......!P..!P..!...!...#...#...#l |
| 03a0 | 00 03 23 6c 00 03 23 d8 00 03 23 d8 00 03 24 48 00 03 24 48 00 03 24 b4 00 03 24 b4 00 03 25 26 | ..#l..#...#...$H..$H..$...$...%& |
| 03c0 | 00 03 25 26 00 03 25 92 00 03 25 92 00 03 25 fc 00 03 25 fc 00 03 27 60 00 03 27 60 00 03 27 d6 | ..%&..%...%...%...%...'`..'`..'. |
| 03e0 | 00 03 27 d6 00 03 28 4c 00 03 28 4c 00 03 29 44 00 03 29 44 00 03 28 c4 00 03 28 c4 00 03 29 b8 | ..'...(L..(L..)D..)D..(...(...). |
| 0400 | 00 03 29 b8 00 03 2a 1e 00 03 2a 1e 00 03 2a 96 00 03 2a 96 00 03 2c cc 00 03 2c cc 00 03 2d 40 | ..)...*...*...*...*...,...,...-@ |
| 0420 | 00 03 2d 40 00 03 2d a6 00 03 2d a6 00 03 2e 1e 00 03 2e 1e 00 03 2e 86 00 03 2e 86 00 03 2e f6 | ..-@..-...-..................... |
| 0440 | 00 03 2e f6 00 03 2f d4 00 03 2f d4 00 03 30 40 00 03 30 40 00 03 31 24 00 03 31 24 00 03 31 94 | ....../.../...0@..0@..1$..1$..1. |
| 0460 | 00 03 31 94 00 03 31 fc 00 03 31 fc 00 03 32 e6 00 03 32 e6 00 03 33 56 00 03 33 56 00 03 35 92 | ..1...1...1...2...2...3V..3V..5. |
| 0480 | 00 03 35 92 00 03 36 04 00 03 36 04 00 03 36 80 00 03 36 80 00 03 36 f0 00 03 36 f0 00 03 37 66 | ..5...6...6...6...6...6...6...7f |
| 04a0 | 00 03 37 66 00 03 55 e0 00 03 55 e0 00 03 39 aa 00 03 39 aa 00 03 3b 7a 00 03 3b 7a 00 03 3b e8 | ..7f..U...U...9...9...;z..;z..;. |
| 04c0 | 00 03 3b e8 00 03 3c 58 00 03 3c 58 00 03 3c c2 00 03 3c c2 00 03 3f dc 00 03 3f dc 00 03 3d 26 | ..;...<X..<X..<...<...?...?...=& |
| 04e0 | 00 03 3d 26 00 03 3d 8e 00 03 3d 8e 00 03 3e 04 00 03 3e 04 00 03 3e 78 00 03 3e 78 00 03 3e f0 | ..=&..=...=...>...>...>x..>x..>. |
| 0500 | 00 03 3e f0 00 03 40 48 00 03 40 48 00 03 40 ba 00 03 40 ba 00 03 41 26 00 03 41 26 00 03 38 ba | ..>...@H..@H..@...@...A&..A&..8. |
| 0520 | 00 03 38 ba 00 03 43 ba 00 03 43 ba 00 03 44 28 00 03 44 28 00 03 44 98 00 03 44 98 00 03 45 08 | ..8...C...C...D(..D(..D...D...E. |
| 0540 | 00 03 45 08 00 03 45 72 00 03 45 72 00 03 46 5e 00 03 46 5e 00 03 46 d6 00 03 46 d6 00 03 47 c2 | ..E...Er..Er..F^..F^..F...F...G. |
| 0560 | 00 03 47 c2 00 03 49 2c 00 03 49 2c 00 03 4a 2e 00 03 4a 2e 00 03 48 b4 00 03 48 b4 00 03 49 ae | ..G...I,..I,..J...J...H...H...I. |
| 0580 | 00 03 49 ae 00 03 a2 88 00 03 a2 88 00 03 4a b8 00 03 4a b8 00 03 4b 26 00 03 4b 26 00 03 4b 96 | ..I...........J...J...K&..K&..K. |
| 05a0 | 00 03 4b 96 00 03 4c 08 00 03 4c 08 00 03 4c 7c 00 03 4c 7c 00 03 4c e6 00 03 4c e6 00 03 4d 5a | ..K...L...L...L|..L|..L...L...MZ |
| 05c0 | 00 03 4d 5a 00 03 4e 4c 00 03 4e 4c 00 03 3a 9c 00 03 3a 9c 00 03 4e b8 00 03 4e b8 00 03 3b 08 | ..MZ..NL..NL..:...:...N...N...;. |
| 05e0 | 00 03 3b 08 00 03 4d c6 00 03 4d c6 00 03 4f 2a 00 03 4f 2a 00 03 8f a0 00 03 8f a0 00 03 90 16 | ..;...M...M...O*..O*............ |
| 0600 | 00 03 90 16 00 03 67 fe 00 03 67 fe 00 03 50 0a 00 03 50 0a 00 03 50 7e 00 03 50 7e 00 03 50 f4 | ......g...g...P...P...P~..P~..P. |
| 0620 | 00 03 50 f4 00 03 51 76 00 03 51 76 00 03 51 f8 00 03 51 f8 00 03 4f 9c 00 03 4f 9c 00 03 52 7e | ..P...Qv..Qv..Q...Q...O...O...R~ |
| 0640 | 00 03 52 7e 00 03 52 ee 00 03 52 ee 00 03 53 5c 00 03 53 5c 00 03 53 c4 00 03 53 c4 00 03 54 30 | ..R~..R...R...S\..S\..S...S...T0 |
| 0660 | 00 03 54 30 00 03 54 96 00 03 54 96 00 03 55 00 00 03 55 00 00 03 55 70 00 03 55 70 00 03 56 4c | ..T0..T...T...U...U...Up..Up..VL |
| 0680 | 00 03 56 4c 00 03 57 2c 00 03 57 2c 00 03 59 14 00 03 59 14 00 03 59 8a 00 03 59 8a 00 03 59 f6 | ..VL..W,..W,..Y...Y...Y...Y...Y. |
| 06a0 | 00 03 59 f6 00 03 5a 68 00 03 5a 68 00 03 5b c0 00 03 5b c0 00 03 5a d4 00 03 5a d4 00 03 5d 10 | ..Y...Zh..Zh..[...[...Z...Z...]. |
| 06c0 | 00 03 5d 10 00 03 5c 32 00 03 5c 32 00 03 5d 86 00 03 5d 86 00 03 5d f0 00 03 5d f0 00 03 5e d0 | ..]...\2..\2..]...]...]...]...^. |
| 06e0 | 00 03 5e d0 00 03 60 24 00 03 60 24 00 03 60 90 00 03 60 90 00 03 5f ae 00 03 5f ae 00 03 60 fe | ..^...`$..`$..`...`..._..._...`. |
| 0700 | 00 03 60 fe 00 03 61 76 00 03 61 76 00 03 61 e2 00 03 61 e2 00 03 62 4a 00 03 62 4a 00 03 62 b0 | ..`...av..av..a...a...bJ..bJ..b. |
| 0720 | 00 03 62 b0 00 03 63 1c 00 03 63 1c 00 03 64 00 00 03 64 00 00 03 64 70 00 03 64 70 00 03 65 4e | ..b...c...c...d...d...dp..dp..eN |
| 0740 | 00 03 65 4e 00 03 65 be 00 03 65 be 00 03 67 0a 00 03 67 0a 00 03 67 84 00 03 67 84 00 03 c1 a6 | ..eN..e...e...g...g...g...g..... |
| 0760 | 00 03 c1 a6 00 03 c0 c2 00 03 c0 c2 00 03 c3 fa 00 03 c3 fa 00 03 68 7c 00 03 68 7c 00 03 69 5c | ......................h|..h|..i\ |
| 0780 | 00 03 69 5c 00 03 cd 08 00 03 cd 08 00 03 69 d4 00 03 69 d4 00 03 6a 4c 00 03 6a 4c 00 03 6a c0 | ..i\..........i...i...jL..jL..j. |
| 07a0 | 00 03 6a c0 00 03 6b 38 00 03 6b 38 00 03 6f ce 00 03 6f ce 00 03 71 22 00 03 71 22 00 03 64 e2 | ..j...k8..k8..o...o...q"..q"..d. |
| 07c0 | 00 03 64 e2 00 03 6b 9e 00 03 6b 9e 00 03 6c 0e 00 03 6c 0e 00 03 6c f8 00 03 6c f8 00 03 6d 70 | ..d...k...k...l...l...l...l...mp |
| 07e0 | 00 03 6d 70 00 03 6d de 00 03 6d de 00 03 6f 5a 00 03 6f 5a 00 03 74 c2 00 03 74 c2 00 03 74 50 | ..mp..m...m...oZ..oZ..t...t...tP |
| 0800 | 00 03 74 50 00 03 70 46 00 03 70 46 00 03 70 b4 00 03 70 b4 00 03 71 94 00 03 71 94 00 03 72 7a | ..tP..pF..pF..p...p...q...q...rz |
| 0820 | 00 03 72 7a 00 03 72 f2 00 03 72 f2 00 03 73 e0 00 03 73 e0 00 03 75 30 00 03 75 30 00 03 76 08 | ..rz..r...r...s...s...u0..u0..v. |
| 0840 | 00 03 76 08 00 03 76 7c 00 03 76 7c 00 03 76 f4 00 03 76 f4 00 03 77 60 00 03 77 60 00 03 77 ce | ..v...v|..v|..v...v...w`..w`..w. |
| 0860 | 00 03 77 ce 00 03 78 3e 00 03 78 3e 00 03 78 a8 00 03 78 a8 00 03 79 16 00 03 79 16 00 03 79 82 | ..w...x>..x>..x...x...y...y...y. |
| 0880 | 00 03 79 82 00 03 7c fe 00 03 7c fe 00 03 7d 72 00 03 7d 72 00 03 7d e0 00 03 7d e0 00 03 7e 50 | ..y...|...|...}r..}r..}...}...~P |
| 08a0 | 00 03 7e 50 00 03 7e c8 00 03 7e c8 00 03 c2 20 00 03 c2 20 00 03 7f 4c 00 03 7f 4c 00 03 7f c0 | ..~P..~...~............L...L.... |
| 08c0 | 00 03 7f c0 00 03 80 38 00 03 80 38 00 03 81 1a 00 03 81 1a 00 03 80 ac 00 03 80 ac 00 03 81 fc | .......8...8.................... |
| 08e0 | 00 03 81 fc 00 03 81 8a 00 03 81 8a 00 03 7b b4 00 03 7b b4 00 03 7c 1c 00 03 7c 1c 00 03 7c 8c | ..............{...{...|...|...|. |
| 0900 | 00 03 7c 8c 00 03 82 68 00 03 82 68 00 03 82 e0 00 03 82 e0 00 03 83 5a 00 03 83 5a 00 03 83 d6 | ..|....h...h...........Z...Z.... |
| 0920 | 00 03 83 d6 00 03 85 40 00 03 85 40 00 03 85 ac 00 03 85 ac 00 03 86 20 00 03 86 20 00 03 86 94 | .......@...@.................... |
| 0940 | 00 03 86 94 00 03 87 0a 00 03 87 0a 00 03 aa dc 00 03 aa dc 00 03 87 82 00 03 87 82 00 03 5e 62 | ..............................^b |
| 0960 | 00 03 5e 62 00 03 84 ce 00 03 84 ce 00 03 87 f8 00 03 87 f8 00 03 89 52 00 03 89 52 00 03 88 6a | ..^b...................R...R...j |
| 0980 | 00 03 88 6a 00 03 88 de 00 03 88 de 00 03 89 c4 00 03 89 c4 00 03 8b 1e 00 03 8b 1e 00 03 8a 36 | ...j...........................6 |
| 09a0 | 00 03 8a 36 00 03 8a aa 00 03 8a aa 00 03 8b 90 00 03 8b 90 00 03 8c ea 00 03 8c ea 00 03 8c 02 | ...6............................ |
| 09c0 | 00 03 8c 02 00 03 8c 76 00 03 8c 76 00 03 8d 5c 00 03 8d 5c 00 03 8e b6 00 03 8e b6 00 03 8d ce | .......v...v...\...\............ |
| 09e0 | 00 03 8d ce 00 03 8e 42 00 03 8e 42 00 03 90 94 00 03 90 94 00 03 91 04 00 03 91 04 00 03 91 76 | .......B...B...................v |
| 0a00 | 00 03 91 76 00 03 91 ea 00 03 91 ea 00 03 93 42 00 03 93 42 00 03 93 ae 00 03 93 ae 00 03 94 1e | ...v...........B...B............ |
| 0a20 | 00 03 94 1e 00 03 94 8e 00 03 94 8e 00 03 95 00 00 03 95 00 00 03 95 70 00 03 95 70 00 03 95 e6 | .......................p...p.... |
| 0a40 | 00 03 95 e6 00 03 97 32 00 03 97 32 00 03 98 7c 00 03 98 7c 00 03 98 f0 00 03 98 f0 00 03 99 68 | .......2...2...|...|...........h |
| 0a60 | 00 03 99 68 00 03 99 e2 00 03 99 e2 00 03 9a 5e 00 03 9a 5e 00 03 9b c0 00 03 9b c0 00 03 9c 30 | ...h...........^...^...........0 |
| 0a80 | 00 03 9c 30 00 03 9c 9c 00 03 9c 9c 00 03 9d 14 00 03 9d 14 00 03 26 e8 00 03 26 e8 00 03 9d f8 | ...0..................&...&..... |
| 0aa0 | 00 03 9d f8 00 03 9e 6a 00 03 9e 6a 00 03 9e de 00 03 9e de 00 03 9f 50 00 03 9f 50 00 03 9f be | .......j...j...........P...P.... |
| 0ac0 | 00 03 9f be 00 03 a0 36 00 03 a0 36 00 03 a0 ac 00 03 a0 ac 00 03 a1 1c 00 03 a1 1c 00 03 a1 8e | .......6...6.................... |
| 0ae0 | 00 03 a1 8e 00 03 a2 14 00 03 a2 14 00 03 a2 fe 00 03 a2 fe 00 03 a3 6e 00 03 a3 6e 00 03 a3 e4 | .......................n...n.... |
| 0b00 | 00 03 a3 e4 00 03 a4 5c 00 03 a4 5c 00 03 a4 d8 00 03 a4 d8 00 03 a5 48 00 03 a5 48 00 03 a5 b6 | .......\...\...........H...H.... |
| 0b20 | 00 03 a5 b6 00 03 a6 2a 00 03 a6 2a 00 03 a6 a0 00 03 a6 a0 00 03 a7 0c 00 03 a7 0c 00 03 a7 7a | .......*...*...................z |
| 0b40 | 00 03 a7 7a 00 03 ef ce 00 03 ef ce 00 03 f0 38 00 03 f0 38 00 03 f0 a8 00 03 f0 a8 00 03 f1 1a | ...z...........8...8............ |
| 0b60 | 00 03 f1 1a 00 03 f1 82 00 03 f1 82 00 03 f1 f0 00 03 f1 f0 00 03 a7 e6 00 03 a7 e6 00 03 a8 56 | ...............................V |
| 0b80 | 00 03 a8 56 00 03 a8 bc 00 03 a8 bc 00 03 a9 26 00 03 a9 26 00 03 aa 02 00 03 aa 02 00 03 b1 d4 | ...V...........&...&............ |
| 0ba0 | 00 03 b1 d4 00 03 aa 6a 00 03 aa 6a 00 03 ab 4a 00 03 ab 4a 00 03 ab c2 00 03 ab c2 00 03 ac 34 | .......j...j...J...J...........4 |
| 0bc0 | 00 03 ac 34 00 03 b0 10 00 03 b0 10 00 03 b0 82 00 03 b0 82 00 03 b1 5e 00 03 b1 5e 00 03 b2 b2 | ...4...................^...^.... |
| 0be0 | 00 03 b2 b2 00 03 b3 1e 00 03 b3 1e 00 03 b3 88 00 03 b3 88 00 03 b3 ec 00 03 b3 ec 00 03 b4 52 | ...............................R |
| 0c00 | 00 03 b4 52 00 03 b5 a6 00 03 b5 a6 00 03 b6 14 00 03 b6 14 00 03 b8 52 00 03 b8 52 00 03 b8 be | ...R...................R...R.... |
| 0c20 | 00 03 b8 be 00 03 b9 2c 00 03 b9 2c 00 03 b9 9e 00 03 b9 9e 00 03 ba 0c 00 03 ba 0c 00 03 bc 4a | .......,...,...................J |
| 0c40 | 00 03 bc 4a 00 03 bd 2e 00 03 bd 2e 00 03 bd a2 00 03 bd a2 00 03 be 16 00 03 be 16 00 03 be 8a | ...J............................ |
| 0c60 | 00 03 be 8a 00 03 bf 6c 00 03 bf 6c 00 03 bf e2 00 03 bf e2 00 03 c0 5a 00 03 c0 5a 00 03 c1 40 | .......l...l...........Z...Z...@ |
| 0c80 | 00 03 c1 40 00 03 c2 9a 00 03 c2 9a 00 03 c3 0e 00 03 c3 0e 00 03 c3 82 00 03 c3 82 00 03 c4 6e | ...@...........................n |
| 0ca0 | 00 03 c4 6e 00 03 c4 e2 00 03 c4 e2 00 03 c5 5a 00 03 c5 5a 00 03 c6 b0 00 03 c6 b0 00 03 c7 20 | ...n...........Z...Z............ |
| 0cc0 | 00 03 c7 20 00 03 ce 60 00 03 ce 60 00 03 cd f2 00 03 cd f2 00 03 c5 ca 00 03 c5 ca 00 03 c8 18 | .......`...`.................... |
| 0ce0 | 00 03 c8 18 00 03 c8 90 00 03 c8 90 00 03 c9 02 00 03 c9 02 00 03 c9 7a 00 03 c9 7a 00 03 c9 f6 | .......................z...z.... |
| 0d00 | 00 03 c9 f6 00 03 ca 66 00 03 ca 66 00 03 ca d8 00 03 ca d8 00 03 cb 48 00 03 cb 48 00 03 cc 2e | .......f...f...........H...H.... |
| 0d20 | 00 03 cc 2e 00 03 ce ce 00 03 ce ce 00 03 cf 34 00 03 cf 34 00 03 cf 98 00 03 cf 98 00 03 d0 6e | ...............4...4...........n |
| 0d40 | 00 03 d0 6e 00 03 d0 da 00 03 d0 da 00 03 d1 4c 00 03 d1 4c 00 03 d1 ba 00 03 d1 ba 00 03 d2 2a | ...n...........L...L...........* |
| 0d60 | 00 03 d2 2a 00 03 d3 7a 00 03 d3 7a 00 03 d3 0c 00 03 d3 0c 00 03 d3 f0 00 03 d3 f0 00 03 d4 64 | ...*...z...z...................d |
| 0d80 | 00 03 d4 64 00 03 d4 d8 00 03 d4 d8 00 03 d5 b4 00 03 d5 b4 00 03 d6 26 00 03 d6 26 00 03 d8 5e | ...d...................&...&...^ |
| 0da0 | 00 03 d8 5e 00 03 d5 46 00 03 d5 46 00 03 d7 0c 00 03 d7 0c 00 03 d6 98 00 03 d6 98 00 03 d7 7c | ...^...F...F...................| |
| 0dc0 | 00 03 d7 7c 00 03 d7 ec 00 03 d7 ec 00 03 d8 d2 00 03 d8 d2 00 03 d9 48 00 03 d9 48 00 03 d9 be | ...|...................H...H.... |
| 0de0 | 00 03 d9 be 00 03 da 36 00 03 da 36 00 03 da ac 00 03 da ac 00 03 db a2 00 03 db a2 00 03 dc 16 | .......6...6.................... |
| 0e00 | 00 03 dc 16 00 03 dc 8a 00 03 dc 8a 00 03 db 24 00 03 db 24 00 03 dd 70 00 03 dd 70 00 03 de 56 | ...............$...$...p...p...V |
| 0e20 | 00 03 de 56 00 03 dd e2 00 03 dd e2 00 03 de c2 00 03 de c2 00 03 df 9a 00 03 df 9a 00 03 e0 78 | ...V...........................x |
| 0e40 | 00 03 e0 78 00 03 e1 42 00 03 e1 42 00 03 e1 b2 00 03 e1 b2 00 03 e2 24 00 03 e2 24 00 03 e3 26 | ...x...B...B...........$...$...& |
| 0e60 | 00 03 e3 26 00 03 e2 a2 00 03 e2 a2 00 03 e4 18 00 03 e4 18 00 03 e4 90 00 03 e4 90 00 03 e5 6c | ...&...........................l |
| 0e80 | 00 03 e5 6c 00 03 e5 d4 00 03 e5 d4 00 03 e6 a6 00 03 e6 a6 00 03 e9 42 00 03 e9 42 00 03 e7 8a | ...l...................B...B.... |
| 0ea0 | 00 03 e7 8a 00 03 e7 0c 00 03 e7 0c 00 03 e8 00 00 03 e8 00 00 03 e9 b6 00 03 e9 b6 00 03 ea 92 | ................................ |
| 0ec0 | 00 03 ea 92 00 03 ea fe 00 03 ea fe 00 03 eb 64 00 03 eb 64 00 03 eb da 00 03 eb da 00 03 ec c2 | ...............d...d............ |
| 0ee0 | 00 03 ec c2 00 03 f3 46 00 03 f3 46 00 03 f3 bc 00 03 f3 bc 00 03 f4 32 00 03 f4 32 00 03 f4 a8 | .......F...F...........2...2.... |
| 0f00 | 00 03 f4 a8 00 03 ed 32 00 03 ed 32 00 03 ed 98 00 03 ed 98 00 03 d2 98 00 03 d2 98 00 03 96 4e | .......2...2...................N |
| 0f20 | 00 03 96 4e 00 02 58 2a 00 02 58 2a 00 02 57 bc 00 02 57 bc 00 02 54 fe 00 02 54 fe 00 02 58 9e | ...N..X*..X*..W...W...T...T...X. |
| 0f40 | 00 02 58 9e 00 02 55 72 00 02 55 72 00 02 55 e6 00 02 55 e6 00 02 56 de 00 02 56 de 00 02 56 58 | ..X...Ur..Ur..U...U...V...V...VX |
| 0f60 | 00 02 56 58 00 02 57 50 00 02 57 50 00 02 5a c0 00 02 5a c0 00 02 5a 56 00 02 5a 56 00 02 59 ee | ..VX..WP..WP..Z...Z...ZV..ZV..Y. |
| 0f80 | 00 02 59 ee 00 02 59 78 00 02 59 78 00 02 5b 2c 00 02 5b 2c 00 02 59 0e 00 02 59 0e 00 03 38 44 | ..Y...Yx..Yx..[,..[,..Y...Y...8D |
| 0fa0 | 00 03 38 44 00 03 56 c4 00 03 56 c4 00 03 e6 3e 00 03 e6 3e 00 03 34 4e 00 03 34 4e 00 03 b0 f4 | ..8D..V...V....>...>..4N..4N.... |
| 0fc0 | 00 03 b0 f4 00 03 72 0c 00 03 72 0c 00 03 32 72 00 03 32 72 00 03 45 e8 00 03 45 e8 00 03 ae a2 | ......r...r...2r..2r..E...E..... |
| 0fe0 | 00 03 ae a2 00 03 5f 3a 00 03 5f 3a 00 03 b6 80 00 03 b6 80 00 04 87 12 00 04 87 12 00 04 9c 72 | ......_:.._:...................r |
| 1000 | 00 04 9c 72 00 04 94 ce 00 04 94 ce 00 04 88 f4 00 04 88 f4 00 04 88 94 00 04 88 94 00 04 89 b2 | ...r............................ |
| 1020 | 00 04 89 b2 00 04 91 02 00 04 91 02 00 04 94 10 00 04 94 10 00 04 95 8e 00 04 95 8e 00 04 86 b4 | ................................ |
| 1040 | 00 04 86 b4 00 04 89 52 00 04 89 52 00 04 90 a2 00 04 90 a2 00 03 ef 58 00 03 ef 58 00 03 f2 d0 | .......R...R...........X...X.... |
| 1060 | 00 03 f2 d0 00 03 f2 5c 00 03 f2 5c 00 03 92 5c 00 03 92 5c 00 03 66 9a 00 03 66 9a 00 03 98 0c | .......\...\...\...\..f...f..... |
| 1080 | 00 03 98 0c 00 03 1e a4 00 03 1e a4 00 03 1f 10 00 03 1f 10 00 03 e8 66 00 03 e8 66 00 03 e8 d0 | .......................f...f.... |
| 10a0 | 00 03 e8 d0 00 03 af 96 00 03 af 96 00 03 ae 24 00 03 ae 24 00 03 af 1c 00 03 af 1c 00 02 81 52 | ...............$...$...........R |
| 10c0 | 00 02 81 52 00 02 7e 7c 00 02 7e 7c 00 02 80 dc 00 02 80 dc 00 02 7f e2 00 02 7f e2 00 02 80 5e | ...R..~|..~|...................^ |
| 10e0 | 00 02 80 5e 00 03 7a ce 00 03 7a ce 00 03 bb 6c 00 03 bb 6c 00 03 37 d4 00 03 37 d4 00 03 dd 00 | ...^..z...z....l...l..7...7..... |
| 1100 | 00 03 dd 00 00 03 e3 a2 00 03 e3 a2 00 03 79 f0 00 03 79 f0 00 02 7f 6e 00 02 7f 6e 00 02 84 ec | ..............y...y....n...n.... |
| 1120 | 00 02 84 ec 00 03 f5 1e 00 03 f5 1e 00 03 13 8e 00 03 13 8e 00 03 ba 74 00 03 ba 74 00 03 14 06 | .......................t...t.... |
| 1140 | 00 03 14 06 00 03 ba f0 00 03 ba f0 00 04 98 3a 00 04 98 3a 00 04 97 76 00 04 97 76 00 04 9a e8 | ...............:...:...v...v.... |
| 1160 | 00 04 9a e8 00 04 96 b2 00 04 96 b2 00 04 9a 24 00 04 9a 24 00 04 9a 86 00 04 9a 86 00 04 97 d8 | ...............$...$............ |
| 1180 | 00 04 97 d8 00 04 99 c2 00 04 99 c2 00 04 96 50 00 04 96 50 00 04 97 14 00 04 97 14 00 04 98 fe | ...............P...P............ |
| 11a0 | 00 04 98 fe 00 04 98 9c 00 04 98 9c 00 04 99 60 00 04 99 60 00 04 9b 4a 00 04 9b 4a 00 04 9b ac | ...............`...`...J...J.... |
| 11c0 | 00 04 9b ac 00 04 7e f2 00 04 7e f2 00 04 7e 8e 00 04 7e 8e 00 04 7f 54 00 04 7f 54 00 04 7e 2a | ......~...~...~...~....T...T..~* |
| 11e0 | 00 04 7e 2a 00 04 7f b8 00 04 7f b8 00 04 9d 32 00 04 9d 32 00 04 9c d0 00 04 9c d0 00 04 9d 94 | ..~*...........2...2............ |
| 1200 | 00 04 9d 94 00 04 9d f8 00 04 9d f8 00 04 a1 80 00 04 a1 80 00 04 a0 bc 00 04 a0 bc 00 04 a4 2e | ................................ |
| 1220 | 00 04 a4 2e 00 04 9f f8 00 04 9f f8 00 04 a4 90 00 04 a4 90 00 04 a5 56 00 04 a5 56 00 04 84 ca | .......................V...V.... |
| 1240 | 00 04 84 ca 00 04 a3 6a 00 04 a3 6a 00 04 a1 1e 00 04 a1 1e 00 04 a3 08 00 04 a3 08 00 04 9f 96 | .......j...j.................... |
| 1260 | 00 04 9f 96 00 04 a0 5a 00 04 a0 5a 00 04 a3 cc 00 04 a3 cc 00 04 a2 44 00 04 a2 44 00 04 a1 e2 | .......Z...Z...........D...D.... |
| 1280 | 00 04 a1 e2 00 04 a2 a6 00 04 a2 a6 00 04 85 30 00 04 85 30 00 04 84 04 00 04 84 04 00 04 83 a0 | ...............0...0............ |
| 12a0 | 00 04 83 a0 00 04 84 66 00 04 84 66 00 04 7b 6c 00 04 7b 6c 00 04 91 c2 00 04 91 c2 00 04 a4 f2 | .......f...f..{l..{l............ |
| 12c0 | 00 04 a4 f2 00 04 92 26 00 04 92 26 00 04 93 ae 00 04 93 ae 00 04 92 ea 00 04 92 ea 00 04 93 4c | .......&...&...................L |
| 12e0 | 00 04 93 4c 00 04 92 88 00 04 92 88 00 04 7b d0 00 04 7b d0 00 04 95 2c 00 04 95 2c 00 04 7c fa | ...L..........{...{....,...,..|. |
| 1300 | 00 04 7c fa 00 04 9c 0e 00 04 9c 0e 00 04 7d 5e 00 04 7d 5e 00 04 9f 32 00 04 9f 32 00 04 82 d4 | ..|...........}^..}^...2...2.... |
| 1320 | 00 04 82 d4 00 04 82 6e 00 04 82 6e 00 04 95 ee 00 04 95 ee 00 04 94 6e 00 04 94 6e 00 04 87 d2 | .......n...n...........n...n.... |
| 1340 | 00 04 87 d2 00 04 86 54 00 04 86 54 00 04 87 72 00 04 87 72 00 04 85 92 00 04 85 92 00 04 77 98 | .......T...T...r...r..........w. |
| 1360 | 00 04 77 98 00 04 85 f2 00 04 85 f2 00 04 79 22 00 04 79 22 00 04 79 82 00 04 79 82 00 04 78 5e | ..w...........y"..y"..y...y...x^ |
| 1380 | 00 04 78 5e 00 04 78 c0 00 04 78 c0 00 04 7a ac 00 04 7a ac 00 04 7b 0c 00 04 7b 0c 00 04 81 aa | ..x^..x...x...z...z...{...{..... |
| 13a0 | 00 04 81 aa 00 04 80 e2 00 04 80 e2 00 04 82 0c 00 04 82 0c 00 04 7d c4 00 04 7d c4 00 04 8d 84 | ......................}...}..... |
| 13c0 | 00 04 8d 84 00 04 8b fc 00 04 8b fc 00 04 8b 38 00 04 8b 38 00 04 8a 74 00 04 8a 74 00 04 90 3e | ...............8...8...t...t...> |
| 13e0 | 00 04 90 3e 00 04 8d 22 00 04 8d 22 00 04 8c c0 00 04 8c c0 00 04 8a 12 00 04 8a 12 00 04 8c 5e | ...>..."..."...................^ |
| 1400 | 00 04 8c 5e 00 04 8b 9a 00 04 8b 9a 00 04 8a d6 00 04 8a d6 00 04 80 1a 00 04 80 1a 00 04 80 7e | ...^...........................~ |
| 1420 | 00 04 80 7e 00 04 75 9a 00 04 75 9a 00 04 77 34 00 04 77 34 00 04 76 62 00 04 76 62 00 04 75 fe | ...~..u...u...w4..w4..vb..vb..u. |
| 1440 | 00 04 75 fe 00 04 88 32 00 04 88 32 00 04 81 46 00 04 81 46 00 04 79 e2 00 04 79 e2 00 04 83 3a | ..u....2...2...F...F..y...y....: |
| 1460 | 00 04 83 3a 00 04 8d e6 00 04 8d e6 00 04 8e 4a 00 04 8e 4a 00 04 8f da 00 04 8f da 00 04 8e ae | ...:...........J...J............ |
| 1480 | 00 04 8e ae 00 04 8f 76 00 04 8f 76 00 04 8f 12 00 04 8f 12 00 04 77 fa 00 04 77 fa 00 03 a9 98 | .......v...v..........w...w..... |
| 14a0 | 00 03 a9 98 00 03 cd 82 00 03 cd 82 00 02 54 3e 00 02 54 3e 00 02 53 74 00 02 53 74 00 02 52 d6 | ..............T>..T>..St..St..R. |
| 14c0 | 00 02 52 d6 00 03 b7 00 00 03 b7 00 00 03 42 e0 00 03 42 e0 00 03 43 4c 00 03 43 4c 00 03 b2 46 | ..R...........B...B...CL..CL...F |
| 14e0 | 00 03 b2 46 00 03 35 24 00 03 35 24 00 03 34 ba 00 03 34 ba 00 03 e5 02 00 03 e5 02 00 03 41 98 | ...F..5$..5$..4...4...........A. |
| 1500 | 00 03 41 98 00 03 42 02 00 03 42 02 00 03 42 70 00 03 42 70 00 03 cb ba 00 03 cb ba 00 03 c6 3a | ..A...B...B...Bp..Bp...........: |
| 1520 | 00 03 c6 3a 00 03 3a 2e 00 03 3a 2e 00 03 cc a2 00 03 cc a2 00 03 1e 3a 00 03 1e 3a 00 03 47 4a | ...:..:...:............:...:..GJ |
| 1540 | 00 03 47 4a 00 02 7d 30 00 02 7d 30 00 02 83 9a 00 02 83 9a 00 02 74 ae 00 02 74 ae 00 02 79 a6 | ..GJ..}0..}0..........t...t...y. |
| 1560 | 00 02 79 a6 00 03 5b 4a 00 03 5b 4a 00 03 5c 9c 00 03 5c 9c 00 03 2f 5e 00 03 2f 5e 00 03 12 a8 | ..y...[J..[J..\...\.../^../^.... |
| 1580 | 00 03 12 a8 00 03 b7 6a 00 03 b7 6a 00 03 ee 00 00 03 ee 00 00 03 0a 92 00 03 0a 92 00 03 0b 0a | .......j...j.................... |
| 15a0 | 00 03 0b 0a 00 03 39 30 00 03 39 30 00 03 48 30 00 03 48 30 00 03 58 16 00 03 58 16 00 03 58 94 | ......90..90..H0..H0..X...X...X. |
| 15c0 | 00 03 58 94 00 03 63 82 00 03 63 82 00 03 66 22 00 03 66 22 00 03 8f 28 00 03 8f 28 00 03 ad 26 | ..X...c...c...f"..f"...(...(...& |
| 15e0 | 00 03 ad 26 00 03 ac a6 00 03 ac a6 00 03 75 98 00 03 75 98 00 03 68 f0 00 03 68 f0 00 03 26 70 | ...&..........u...u...h...h...&p |
| 1600 | 00 03 26 70 00 03 7a 60 00 03 7a 60 00 03 13 1e 00 03 13 1e 00 03 b7 e0 00 03 b7 e0 00 03 ad ac | ..&p..z`..z`.................... |
| 1620 | 00 03 ad ac 00 03 b4 be 00 03 b4 be 00 03 ec 52 00 03 ec 52 00 03 be fe 00 03 be fe 00 03 c7 a6 | ...............R...R............ |
| 1640 | 00 03 c7 a6 00 03 2b e0 00 03 2b e0 00 03 22 92 00 03 22 92 00 03 bc be 00 03 bc be 00 03 97 98 | ......+...+..."..."............. |
| 1660 | 00 03 97 98 00 03 e0 02 00 03 e0 02 00 03 d0 00 00 03 d0 00 00 03 22 22 00 03 22 22 00 03 7b 3a | ......................""..""..{: |
| 1680 | 00 03 7b 3a 00 03 57 94 00 03 57 94 00 03 b5 2c 00 03 b5 2c 00 03 2c 50 00 03 2c 50 00 03 33 cc | ..{:..W...W....,...,..,P..,P..3. |
| 16a0 | 00 03 33 cc 00 02 75 26 00 02 75 26 00 02 77 6c 00 02 77 6c 00 02 73 62 00 02 73 62 00 02 75 9c | ..3...u&..u&..wl..wl..sb..sb..u. |
| 16c0 | 00 02 75 9c 00 03 9d 7c 00 03 9d 7c 00 03 ee e8 00 03 ee e8 00 03 18 fe 00 03 18 fe 00 03 6e 4e | ..u....|...|..................nN |
| 16e0 | 00 03 6e 4e 00 03 6e d6 00 03 6e d6 00 03 ee 76 00 03 ee 76 00 03 96 c2 00 03 96 c2 00 03 73 6e | ..nN..n...n....v...v..........sn |
| 1700 | 00 03 73 6e 00 03 df 28 00 03 df 28 00 03 30 ae 00 03 30 ae 00 03 92 c8 00 03 92 c8 00 02 6c 1a | ..sn...(...(..0...0...........l. |
| 1720 | 00 02 6c 1a 00 02 6c 84 00 02 6c 84 00 02 6c ee 00 02 6c ee 00 02 6d 56 00 02 6d 56 00 02 69 7a | ..l...l...l...l...l...mV..mV..iz |
| 1740 | 00 02 69 7a 00 02 69 e4 00 02 69 e4 00 02 6f de 00 02 6f de 00 02 70 48 00 02 70 48 00 02 65 84 | ..iz..i...i...o...o...pH..pH..e. |
| 1760 | 00 02 65 84 00 02 65 ee 00 02 65 ee 00 02 63 5c 00 02 63 5c 00 02 63 c8 00 02 63 c8 00 02 68 9e | ..e...e...e...c\..c\..c...c...h. |
| 1780 | 00 02 68 9e 00 02 69 0c 00 02 69 0c 00 02 67 3c 00 02 67 3c 00 02 66 ca 00 02 66 ca 00 02 66 58 | ..h...i...i...g<..g<..f...f...fX |
| 17a0 | 00 02 66 58 00 02 64 34 00 02 64 34 00 02 64 a8 00 02 64 a8 00 02 65 12 00 02 65 12 00 02 6b 36 | ..fX..d4..d4..d...d...e...e...k6 |
| 17c0 | 00 02 6b 36 00 02 6b a8 00 02 6b a8 00 02 6d be 00 02 6d be 00 02 6e 26 00 02 6e 26 00 02 6e 96 | ..k6..k...k...m...m...n&..n&..n. |
| 17e0 | 00 02 6e 96 00 02 6f 00 00 02 6f 00 00 02 6f 6c 00 02 6f 6c 00 02 67 ae 00 02 67 ae 00 02 68 26 | ..n...o...o...ol..ol..g...g...h& |
| 1800 | 00 02 68 26 00 02 6a 4e 00 02 6a 4e 00 02 6a c2 00 02 6a c2 00 02 70 b2 00 02 70 b2 00 02 71 20 | ..h&..jN..jN..j...j...p...p...q. |
| 1820 | 00 02 71 20 00 02 ae fa 00 02 ae fa 00 03 2b 04 00 03 2b 04 00 03 2b 6c 00 03 2b 6c 00 03 bb de | ..q...........+...+...+l..+l.... |
| 1840 | 00 03 bb de 00 03 9a dc 00 03 9a dc 00 03 ea 26 00 03 ea 26 00 03 e0 dc 00 03 e0 dc 00 04 74 c6 | ...............&...&..........t. |
| 1860 | 00 04 74 c6 00 04 7a 44 00 04 7a 44 00 03 12 3a 00 03 12 3a 00 03 84 54 00 03 84 54 00 03 3f 6a | ..t...zD..zD...:...:...T...T..?j |
| 1880 | 00 03 3f 6a 00 03 6c 82 00 03 6c 82 00 03 9b 4e 00 03 9b 4e 00 04 75 36 00 04 75 36 00 04 76 c6 | ..?j..l...l....N...N..u6..u6..v. |
| 18a0 | 00 04 76 c6 00 04 7c 34 00 04 7c 34 00 04 7c 96 00 04 7c 96 00 04 91 60 00 04 91 60 00 04 26 68 | ..v...|4..|4..|...|....`...`..&h |
| 18c0 | 00 04 26 68 00 02 b7 ee 00 02 b7 ee 00 04 71 5e 00 04 71 5e 00 03 02 e4 00 03 02 e4 00 03 ff 5c | ..&h..........q^..q^...........\ |
| 18e0 | 00 03 ff 5c 00 02 90 78 00 02 90 78 00 04 49 84 00 04 49 84 00 02 db 0a 00 02 db 0a 00 04 13 86 | ...\...x...x..I...I............. |
| 1900 | 00 04 13 86 00 02 a4 a2 00 02 a4 a2 00 04 72 aa 00 04 72 aa 00 03 04 30 00 03 04 30 00 04 4c ee | ..............r...r....0...0..L. |
| 1920 | 00 04 4c ee 00 02 de 74 00 02 de 74 00 04 4c 80 00 04 4c 80 00 02 de 06 00 02 de 06 00 04 4f 02 | ..L....t...t..L...L...........O. |
| 1940 | 00 04 4f 02 00 02 e0 88 00 02 e0 88 00 04 4e 9c 00 04 4e 9c 00 02 e0 22 00 02 e0 22 00 04 5e 10 | ..O...........N...N...."..."..^. |
| 1960 | 00 04 5e 10 00 02 ef 96 00 02 ef 96 00 04 59 aa 00 04 59 aa 00 02 eb 30 00 02 eb 30 00 04 01 78 | ..^...........Y...Y....0...0...x |
| 1980 | 00 04 01 78 00 02 92 94 00 02 92 94 00 04 3f e0 00 04 3f e0 00 02 d1 66 00 02 d1 66 00 04 3a 98 | ...x..........?...?....f...f..:. |
| 19a0 | 00 04 3a 98 00 02 cc 1e 00 02 cc 1e 00 04 2b fe 00 04 2b fe 00 02 bd 84 00 02 bd 84 00 04 17 08 | ..:...........+...+............. |
| 19c0 | 00 04 17 08 00 02 a8 24 00 02 a8 24 00 04 18 48 00 04 18 48 00 02 a9 64 00 02 a9 64 00 04 36 aa | .......$...$...H...H...d...d..6. |
| 19e0 | 00 04 36 aa 00 02 c8 30 00 02 c8 30 00 04 3e a0 00 04 3e a0 00 02 d0 26 00 02 d0 26 00 04 46 ee | ..6....0...0..>...>....&...&..F. |
| 1a00 | 00 04 46 ee 00 02 d8 74 00 02 d8 74 00 03 fd 92 00 03 fd 92 00 02 8e ae 00 02 8e ae 00 04 3b f2 | ..F....t...t..................;. |
| 1a20 | 00 04 3b f2 00 02 cd 78 00 02 cd 78 00 04 70 e8 00 04 70 e8 00 03 02 6e 00 03 02 6e 00 04 73 10 | ..;....x...x..p...p....n...n..s. |
| 1a40 | 00 04 73 10 00 03 04 96 00 03 04 96 00 04 5d 9e 00 04 5d 9e 00 02 ef 24 00 02 ef 24 00 04 08 26 | ..s...........]...]....$...$...& |
| 1a60 | 00 04 08 26 00 02 99 42 00 02 99 42 00 04 1b 44 00 04 1b 44 00 02 ac 60 00 02 ac 60 00 04 1e be | ...&...B...B...D...D...`...`.... |
| 1a80 | 00 04 1e be 00 02 b0 44 00 02 b0 44 00 04 4c 16 00 04 4c 16 00 02 dd 9c 00 02 dd 9c 00 04 3c da | .......D...D..L...L...........<. |
| 1aa0 | 00 04 3c da 00 02 ce 60 00 02 ce 60 00 04 51 30 00 04 51 30 00 02 e2 b6 00 02 e2 b6 00 04 47 58 | ..<....`...`..Q0..Q0..........GX |
| 1ac0 | 00 04 47 58 00 02 d8 de 00 02 d8 de 00 04 30 9c 00 04 30 9c 00 02 c2 22 00 02 c2 22 00 04 3c 66 | ..GX..........0...0...."..."..<f |
| 1ae0 | 00 04 3c 66 00 02 cd ec 00 02 cd ec 00 04 2d a8 00 04 2d a8 00 02 bf 2e 00 02 bf 2e 00 04 5b da | ..<f..........-...-...........[. |
| 1b00 | 00 04 5b da 00 02 ed 60 00 02 ed 60 00 04 26 e0 00 04 26 e0 00 02 b8 66 00 02 b8 66 00 03 f6 62 | ..[....`...`..&...&....f...f...b |
| 1b20 | 00 03 f6 62 00 02 87 7e 00 02 87 7e 00 04 6e c0 00 04 6e c0 00 03 00 46 00 03 00 46 00 04 4f 74 | ...b...~...~..n...n....F...F..Ot |
| 1b40 | 00 04 4f 74 00 02 e0 fa 00 02 e0 fa 00 04 6a 32 00 04 6a 32 00 02 fb b8 00 02 fb b8 00 04 5a 10 | ..Ot..........j2..j2..........Z. |
| 1b60 | 00 04 5a 10 00 02 eb 96 00 02 eb 96 00 04 49 ea 00 04 49 ea 00 02 db 70 00 02 db 70 00 04 31 08 | ..Z...........I...I....p...p..1. |
| 1b80 | 00 04 31 08 00 02 c2 8e 00 02 c2 8e 00 04 2e 7e 00 04 2e 7e 00 02 c0 04 00 02 c0 04 00 04 41 26 | ..1............~...~..........A& |
| 1ba0 | 00 04 41 26 00 02 d2 ac 00 02 d2 ac 00 04 16 1e 00 04 16 1e 00 02 a7 3a 00 02 a7 3a 00 04 2a c0 | ..A&...................:...:..*. |
| 1bc0 | 00 04 2a c0 00 02 bc 46 00 02 bc 46 00 04 10 2a 00 04 10 2a 00 02 a1 46 00 02 a1 46 00 04 37 8e | ..*....F...F...*...*...F...F..7. |
| 1be0 | 00 04 37 8e 00 02 c9 14 00 02 c9 14 00 04 45 34 00 04 45 34 00 02 d6 ba 00 02 d6 ba 00 04 2e ee | ..7...........E4..E4............ |
| 1c00 | 00 04 2e ee 00 02 c0 74 00 02 c0 74 00 04 46 14 00 04 46 14 00 02 d7 9a 00 02 d7 9a 00 04 1b b2 | .......t...t..F...F............. |
| 1c20 | 00 04 1b b2 00 02 ac ce 00 02 ac ce 00 04 73 ea 00 04 73 ea 00 03 05 70 00 03 05 70 00 04 01 da | ..............s...s....p...p.... |
| 1c40 | 00 04 01 da 00 02 92 f6 00 02 92 f6 00 04 14 60 00 04 14 60 00 02 a5 7c 00 02 a5 7c 00 04 34 ea | ...............`...`...|...|..4. |
| 1c60 | 00 04 34 ea 00 02 c6 70 00 02 c6 70 00 04 01 10 00 04 01 10 00 02 92 2c 00 02 92 2c 00 04 4a c2 | ..4....p...p...........,...,..J. |
| 1c80 | 00 04 4a c2 00 02 dc 48 00 02 dc 48 00 04 29 f0 00 04 29 f0 00 02 bb 76 00 02 bb 76 00 03 fa f6 | ..J....H...H..)...)....v...v.... |
| 1ca0 | 00 03 fa f6 00 02 8c 12 00 02 8c 12 00 04 14 cc 00 04 14 cc 00 02 a5 e8 00 02 a5 e8 00 04 04 5e | ...............................^ |
| 1cc0 | 00 04 04 5e 00 02 95 7a 00 02 95 7a 00 04 37 1a 00 04 37 1a 00 02 c8 a0 00 02 c8 a0 00 04 48 40 | ...^...z...z..7...7...........H@ |
| 1ce0 | 00 04 48 40 00 02 d9 c6 00 02 d9 c6 00 04 74 5a 00 04 74 5a 00 03 05 e0 00 03 05 e0 00 03 f9 4e | ..H@..........tZ..tZ...........N |
| 1d00 | 00 03 f9 4e 00 02 8a 6a 00 02 8a 6a 00 04 05 a4 00 04 05 a4 00 02 96 c0 00 02 96 c0 00 04 47 c8 | ...N...j...j..................G. |
| 1d20 | 00 04 47 c8 00 02 d9 4e 00 02 d9 4e 00 04 0c 5a 00 04 0c 5a 00 02 9d 76 00 02 9d 76 00 04 18 ae | ..G....N...N...Z...Z...v...v.... |
| 1d40 | 00 04 18 ae 00 02 a9 ca 00 02 a9 ca 00 03 fe 04 00 03 fe 04 00 02 8f 20 00 02 8f 20 00 04 0b 84 | ................................ |
| 1d60 | 00 04 0b 84 00 02 9c a0 00 02 9c a0 00 04 0d a6 00 04 0d a6 00 02 9e c2 00 02 9e c2 00 04 20 80 | ................................ |
| 1d80 | 00 04 20 80 00 02 b2 06 00 02 b2 06 00 04 34 10 00 04 34 10 00 02 c5 96 00 02 c5 96 00 04 42 88 | ..............4...4...........B. |
| 1da0 | 00 04 42 88 00 02 d4 0e 00 02 d4 0e 00 04 53 ba 00 04 53 ba 00 02 e5 40 00 02 e5 40 00 04 6a a0 | ..B...........S...S....@...@..j. |
| 1dc0 | 00 04 6a a0 00 02 fc 26 00 02 fc 26 00 04 4a 56 00 04 4a 56 00 02 db dc 00 02 db dc 00 04 06 78 | ..j....&...&..JV..JV...........x |
| 1de0 | 00 04 06 78 00 02 97 94 00 02 97 94 00 04 39 4a 00 04 39 4a 00 02 ca d0 00 02 ca d0 00 04 73 7c | ...x..........9J..9J..........s| |
| 1e00 | 00 04 73 7c 00 03 05 02 00 03 05 02 00 04 29 80 00 04 29 80 00 02 bb 06 00 02 bb 06 00 03 f7 46 | ..s|..........)...)............F |
| 1e20 | 00 03 f7 46 00 02 88 62 00 02 88 62 00 04 45 a8 00 04 45 a8 00 02 d7 2e 00 02 d7 2e 00 04 70 74 | ...F...b...b..E...E...........pt |
| 1e40 | 00 04 70 74 00 03 01 fa 00 03 01 fa 00 04 5d 2c 00 04 5d 2c 00 02 ee b2 00 02 ee b2 00 04 00 3e | ..pt..........],..],...........> |
| 1e60 | 00 04 00 3e 00 02 91 5a 00 02 91 5a 00 04 6b 72 00 04 6b 72 00 02 fc f8 00 02 fc f8 00 04 32 48 | ...>...Z...Z..kr..kr..........2H |
| 1e80 | 00 04 32 48 00 02 c3 ce 00 02 c3 ce 00 04 65 e6 00 04 65 e6 00 02 f7 6c 00 02 f7 6c 00 04 00 a8 | ..2H..........e...e....l...l.... |
| 1ea0 | 00 04 00 a8 00 02 91 c4 00 02 91 c4 00 04 64 a8 00 04 64 a8 00 02 f6 2e 00 02 f6 2e 00 03 f5 8c | ..............d...d............. |
| 1ec0 | 00 03 f5 8c 00 02 86 a8 00 02 86 a8 00 03 f5 fa 00 03 f5 fa 00 02 87 16 00 02 87 16 00 03 f6 d8 | ................................ |
| 1ee0 | 00 03 f6 d8 00 02 87 f4 00 02 87 f4 00 03 f7 c2 00 03 f7 c2 00 02 88 de 00 02 88 de 00 03 f8 3a | ...............................: |
| 1f00 | 00 03 f8 3a 00 02 89 56 00 02 89 56 00 03 f8 c0 00 03 f8 c0 00 02 89 dc 00 02 89 dc 00 03 f9 b2 | ...:...V...V.................... |
| 1f20 | 00 03 f9 b2 00 02 8a ce 00 02 8a ce 00 03 fa 1c 00 03 fa 1c 00 02 8b 38 00 02 8b 38 00 03 fa 88 | .......................8...8.... |
| 1f40 | 00 03 fa 88 00 02 8b a4 00 02 8b a4 00 03 fb 68 00 03 fb 68 00 02 8c 84 00 02 8c 84 00 03 fb d6 | ...............h...h............ |
| 1f60 | 00 03 fb d6 00 02 8c f2 00 02 8c f2 00 03 fc 3e 00 03 fc 3e 00 02 8d 5a 00 02 8d 5a 00 03 fc b2 | ...............>...>...Z...Z.... |
| 1f80 | 00 03 fc b2 00 02 8d ce 00 02 8d ce 00 03 fd 28 00 03 fd 28 00 02 8e 44 00 02 8e 44 00 03 fe 74 | ...............(...(...D...D...t |
| 1fa0 | 00 03 fe 74 00 02 8f 90 00 02 8f 90 00 03 fe e6 00 03 fe e6 00 02 90 02 00 02 90 02 00 03 ff c8 | ...t............................ |
| 1fc0 | 00 03 ff c8 00 02 90 e4 00 02 90 e4 00 04 02 4c 00 04 02 4c 00 02 93 68 00 02 93 68 00 04 02 b4 | ...............L...L...h...h.... |
| 1fe0 | 00 04 02 b4 00 02 93 d0 00 02 93 d0 00 04 03 1e 00 04 03 1e 00 02 94 3a 00 02 94 3a 00 04 03 8e | .......................:...:.... |
| 2000 | 00 04 03 8e 00 02 94 aa 00 02 94 aa 00 04 03 f6 00 04 03 f6 00 02 95 12 00 02 95 12 00 04 04 c4 | ................................ |
| 2020 | 00 04 04 c4 00 02 95 e0 00 02 95 e0 00 04 05 32 00 04 05 32 00 02 96 4e 00 02 96 4e 00 04 06 0c | ...............2...2...N...N.... |
| 2040 | 00 04 06 0c 00 02 97 28 00 02 97 28 00 04 06 e0 00 04 06 e0 00 02 97 fc 00 02 97 fc 00 04 07 50 | .......(...(...................P |
| 2060 | 00 04 07 50 00 02 98 6c 00 02 98 6c 00 04 07 bc 00 04 07 bc 00 02 98 d8 00 02 98 d8 00 04 08 8c | ...P...l...l.................... |
| 2080 | 00 04 08 8c 00 02 99 a8 00 02 99 a8 00 04 08 fa 00 04 08 fa 00 02 9a 16 00 02 9a 16 00 04 09 6a | ...............................j |
| 20a0 | 00 04 09 6a 00 02 9a 86 00 02 9a 86 00 04 09 d4 00 04 09 d4 00 02 9a f0 00 02 9a f0 00 04 0a 44 | ...j...........................D |
| 20c0 | 00 04 0a 44 00 02 9b 60 00 02 9b 60 00 04 0a b2 00 04 0a b2 00 02 9b ce 00 02 9b ce 00 04 0b 1a | ...D...`...`.................... |
| 20e0 | 00 04 0b 1a 00 02 9c 36 00 02 9c 36 00 04 0b f0 00 04 0b f0 00 02 9d 0c 00 02 9d 0c 00 04 0c c4 | .......6...6.................... |
| 2100 | 00 04 0c c4 00 02 9d e0 00 02 9d e0 00 04 0d 30 00 04 0d 30 00 02 9e 4c 00 02 9e 4c 00 04 0e 10 | ...............0...0...L...L.... |
| 2120 | 00 04 0e 10 00 02 9f 2c 00 02 9f 2c 00 04 0e 78 00 04 0e 78 00 02 9f 94 00 02 9f 94 00 04 0e e0 | .......,...,...x...x............ |
| 2140 | 00 04 0e e0 00 02 9f fc 00 02 9f fc 00 04 0f 50 00 04 0f 50 00 02 a0 6c 00 02 a0 6c 00 04 0f c0 | ...............P...P...l...l.... |
| 2160 | 00 04 0f c0 00 02 a0 dc 00 02 a0 dc 00 04 10 96 00 04 10 96 00 02 a1 b2 00 02 a1 b2 00 04 10 fe | ................................ |
| 2180 | 00 04 10 fe 00 02 a2 1a 00 02 a2 1a 00 04 11 6a 00 04 11 6a 00 02 a2 86 00 02 a2 86 00 04 11 d8 | ...............j...j............ |
| 21a0 | 00 04 11 d8 00 02 a2 f4 00 02 a2 f4 00 04 12 40 00 04 12 40 00 02 a3 5c 00 02 a3 5c 00 04 12 a6 | ...............@...@...\...\.... |
| 21c0 | 00 04 12 a6 00 02 a3 c2 00 02 a3 c2 00 04 13 1a 00 04 13 1a 00 02 a4 36 00 02 a4 36 00 04 13 f6 | .......................6...6.... |
| 21e0 | 00 04 13 f6 00 02 a5 12 00 02 a5 12 00 04 15 38 00 04 15 38 00 02 a6 54 00 02 a6 54 00 04 15 aa | ...............8...8...T...T.... |
| 2200 | 00 04 15 aa 00 02 a6 c6 00 02 a6 c6 00 04 16 88 00 04 16 88 00 02 a7 a4 00 02 a7 a4 00 04 17 76 | ...............................v |
| 2220 | 00 04 17 76 00 02 a8 92 00 02 a8 92 00 04 17 e0 00 04 17 e0 00 02 a8 fc 00 02 a8 fc 00 04 19 1c | ...v............................ |
| 2240 | 00 04 19 1c 00 02 aa 38 00 02 aa 38 00 04 19 8e 00 04 19 8e 00 02 aa aa 00 02 aa aa 00 04 19 f4 | .......8...8.................... |
| 2260 | 00 04 19 f4 00 02 ab 10 00 02 ab 10 00 04 1a 64 00 04 1a 64 00 02 ab 80 00 02 ab 80 00 04 1a d2 | ...............d...d............ |
| 2280 | 00 04 1a d2 00 02 ab ee 00 02 ab ee 00 04 1c 1c 00 04 1c 1c 00 02 ad 38 00 02 ad 38 00 04 1c 8a | .......................8...8.... |
| 22a0 | 00 04 1c 8a 00 02 ad a6 00 02 ad a6 00 04 1d 00 00 04 1d 00 00 02 ae 1c 00 02 ae 1c 00 04 1d 70 | ...............................p |
| 22c0 | 00 04 1d 70 00 02 ae 8c 00 02 ae 8c 00 04 1d de 00 04 1d de 00 02 af 64 00 02 af 64 00 04 1e 48 | ...p...................d...d...H |
| 22e0 | 00 04 1e 48 00 02 af ce 00 02 af ce 00 04 1f 32 00 04 1f 32 00 02 b0 b8 00 02 b0 b8 00 04 1f a0 | ...H...........2...2............ |
| 2300 | 00 04 1f a0 00 02 b1 26 00 02 b1 26 00 04 20 10 00 04 20 10 00 02 b1 96 00 02 b1 96 00 04 20 ec | .......&...&.................... |
| 2320 | 00 04 20 ec 00 02 b2 72 00 02 b2 72 00 04 21 60 00 04 21 60 00 02 b2 e6 00 02 b2 e6 00 04 21 c8 | .......r...r..!`..!`..........!. |
| 2340 | 00 04 21 c8 00 02 b3 4e 00 02 b3 4e 00 04 22 30 00 04 22 30 00 02 b3 b6 00 02 b3 b6 00 04 22 94 | ..!....N...N.."0.."0..........". |
| 2360 | 00 04 22 94 00 02 b4 1a 00 02 b4 1a 00 04 22 fa 00 04 22 fa 00 02 b4 80 00 02 b4 80 00 04 23 60 | .."..........."..."...........#` |
| 2380 | 00 04 23 60 00 02 b4 e6 00 02 b4 e6 00 04 23 c6 00 04 23 c6 00 02 b5 4c 00 02 b5 4c 00 04 24 3c | ..#`..........#...#....L...L..$< |
| 23a0 | 00 04 24 3c 00 02 b5 c2 00 02 b5 c2 00 04 24 a8 00 04 24 a8 00 02 b6 2e 00 02 b6 2e 00 04 25 16 | ..$<..........$...$...........%. |
| 23c0 | 00 04 25 16 00 02 b6 9c 00 02 b6 9c 00 04 25 86 00 04 25 86 00 02 b7 0c 00 02 b7 0c 00 04 25 f6 | ..%...........%...%...........%. |
| 23e0 | 00 04 25 f6 00 02 b7 7c 00 02 b7 7c 00 04 27 4e 00 04 27 4e 00 02 b8 d4 00 02 b8 d4 00 04 27 ba | ..%....|...|..'N..'N..........'. |
| 2400 | 00 04 27 ba 00 02 b9 40 00 02 b9 40 00 04 28 28 00 04 28 28 00 02 b9 ae 00 02 b9 ae 00 04 28 9e | ..'....@...@..((..((..........(. |
| 2420 | 00 04 28 9e 00 02 ba 24 00 02 ba 24 00 04 29 0a 00 04 29 0a 00 02 ba 90 00 02 ba 90 00 04 2a 56 | ..(....$...$..)...)...........*V |
| 2440 | 00 04 2a 56 00 02 bb dc 00 02 bb dc 00 04 2b 26 00 04 2b 26 00 02 bc ac 00 02 bc ac 00 04 2b 94 | ..*V..........+&..+&..........+. |
| 2460 | 00 04 2b 94 00 02 bd 1a 00 02 bd 1a 00 04 2c 62 00 04 2c 62 00 02 bd e8 00 02 bd e8 00 04 2c ce | ..+...........,b..,b..........,. |
| 2480 | 00 04 2c ce 00 02 be 54 00 02 be 54 00 04 2d 36 00 04 2d 36 00 02 be bc 00 02 be bc 00 04 2e 10 | ..,....T...T..-6..-6............ |
| 24a0 | 00 04 2e 10 00 02 bf 96 00 02 bf 96 00 04 2f 56 00 04 2f 56 00 02 c0 dc 00 02 c0 dc 00 04 2f c0 | ............../V../V........../. |
| 24c0 | 00 04 2f c0 00 02 c1 46 00 02 c1 46 00 04 30 34 00 04 30 34 00 02 c1 ba 00 02 c1 ba 00 04 31 76 | ../....F...F..04..04..........1v |
| 24e0 | 00 04 31 76 00 02 c2 fc 00 02 c2 fc 00 04 31 dc 00 04 31 dc 00 02 c3 62 00 02 c3 62 00 04 32 b6 | ..1v..........1...1....b...b..2. |
| 2500 | 00 04 32 b6 00 02 c4 3c 00 02 c4 3c 00 04 33 22 00 04 33 22 00 02 c4 a8 00 02 c4 a8 00 04 33 98 | ..2....<...<..3"..3"..........3. |
| 2520 | 00 04 33 98 00 02 c5 1e 00 02 c5 1e 00 04 34 82 00 04 34 82 00 02 c6 08 00 02 c6 08 00 04 35 5a | ..3...........4...4...........5Z |
| 2540 | 00 04 35 5a 00 02 c6 e0 00 02 c6 e0 00 04 35 ca 00 04 35 ca 00 02 c7 50 00 02 c7 50 00 04 36 38 | ..5Z..........5...5....P...P..68 |
| 2560 | 00 04 36 38 00 02 c7 be 00 02 c7 be 00 04 37 fe 00 04 37 fe 00 02 c9 84 00 02 c9 84 00 04 38 70 | ..68..........7...7...........8p |
| 2580 | 00 04 38 70 00 02 c9 f6 00 02 c9 f6 00 04 38 e2 00 04 38 e2 00 02 ca 68 00 02 ca 68 00 04 39 b2 | ..8p..........8...8....h...h..9. |
| 25a0 | 00 04 39 b2 00 02 cb 38 00 02 cb 38 00 04 3a 26 00 04 3a 26 00 02 cb ac 00 02 cb ac 00 04 3b 0a | ..9....8...8..:&..:&..........;. |
| 25c0 | 00 04 3b 0a 00 02 cc 90 00 02 cc 90 00 04 3b 80 00 04 3b 80 00 02 cd 06 00 02 cd 06 00 04 3d 4c | ..;...........;...;...........=L |
| 25e0 | 00 04 3d 4c 00 02 ce d2 00 02 ce d2 00 04 3d c0 00 04 3d c0 00 02 cf 46 00 02 cf 46 00 04 3e 32 | ..=L..........=...=....F...F..>2 |
| 2600 | 00 04 3e 32 00 02 cf b8 00 02 cf b8 00 04 3f 06 00 04 3f 06 00 02 d0 8c 00 02 d0 8c 00 04 3f 78 | ..>2..........?...?...........?x |
| 2620 | 00 04 3f 78 00 02 d0 fe 00 02 d0 fe 00 04 40 48 00 04 40 48 00 02 d1 ce 00 02 d1 ce 00 04 40 b6 | ..?x..........@H..@H..........@. |
| 2640 | 00 04 40 b6 00 02 d2 3c 00 02 d2 3c 00 04 41 9a 00 04 41 9a 00 02 d3 20 00 02 d3 20 00 04 42 12 | ..@....<...<..A...A...........B. |
| 2660 | 00 04 42 12 00 02 d3 98 00 02 d3 98 00 04 42 f2 00 04 42 f2 00 02 d4 78 00 02 d4 78 00 04 43 62 | ..B...........B...B....x...x..Cb |
| 2680 | 00 04 43 62 00 02 d4 e8 00 02 d4 e8 00 04 43 ce 00 04 43 ce 00 02 d5 54 00 02 d5 54 00 04 44 42 | ..Cb..........C...C....T...T..DB |
| 26a0 | 00 04 44 42 00 02 d5 c8 00 02 d5 c8 00 04 44 ba 00 04 44 ba 00 02 d6 40 00 02 d6 40 00 04 46 7c | ..DB..........D...D....@...@..F| |
| 26c0 | 00 04 46 7c 00 02 d8 02 00 02 d8 02 00 04 48 ac 00 04 48 ac 00 02 da 32 00 02 da 32 00 04 49 18 | ..F|..........H...H....2...2..I. |
| 26e0 | 00 04 49 18 00 02 da 9e 00 02 da 9e 00 04 4b 30 00 04 4b 30 00 02 dc b6 00 02 dc b6 00 04 4b a8 | ..I...........K0..K0..........K. |
| 2700 | 00 04 4b a8 00 02 dd 2e 00 02 dd 2e 00 04 4d 5e 00 04 4d 5e 00 02 de e4 00 02 de e4 00 04 4d ce | ..K...........M^..M^..........M. |
| 2720 | 00 04 4d ce 00 02 df 54 00 02 df 54 00 04 4e 34 00 04 4e 34 00 02 df ba 00 02 df ba 00 04 4f e8 | ..M....T...T..N4..N4..........O. |
| 2740 | 00 04 4f e8 00 02 e1 6e 00 02 e1 6e 00 04 50 58 00 04 50 58 00 02 e1 de 00 02 e1 de 00 04 50 c8 | ..O....n...n..PX..PX..........P. |
| 2760 | 00 04 50 c8 00 02 e2 4e 00 02 e2 4e 00 04 51 a2 00 04 51 a2 00 02 e3 28 00 02 e3 28 00 04 52 14 | ..P....N...N..Q...Q....(...(..R. |
| 2780 | 00 04 52 14 00 02 e3 9a 00 02 e3 9a 00 04 52 7c 00 04 52 7c 00 02 e4 02 00 02 e4 02 00 04 52 e8 | ..R...........R|..R|..........R. |
| 27a0 | 00 04 52 e8 00 02 e4 6e 00 02 e4 6e 00 04 53 50 00 04 53 50 00 02 e4 d6 00 02 e4 d6 00 04 54 24 | ..R....n...n..SP..SP..........T$ |
| 27c0 | 00 04 54 24 00 02 e5 aa 00 02 e5 aa 00 04 54 88 00 04 54 88 00 02 e6 0e 00 02 e6 0e 00 04 54 ee | ..T$..........T...T...........T. |
| 27e0 | 00 04 54 ee 00 02 e6 74 00 02 e6 74 00 04 55 5a 00 04 55 5a 00 02 e6 e0 00 02 e6 e0 00 04 55 c8 | ..T....t...t..UZ..UZ..........U. |
| 2800 | 00 04 55 c8 00 02 e7 4e 00 02 e7 4e 00 04 56 36 00 04 56 36 00 02 e7 bc 00 02 e7 bc 00 04 56 a2 | ..U....N...N..V6..V6..........V. |
| 2820 | 00 04 56 a2 00 02 e8 28 00 02 e8 28 00 04 57 10 00 04 57 10 00 02 e8 96 00 02 e8 96 00 04 57 80 | ..V....(...(..W...W...........W. |
| 2840 | 00 04 57 80 00 02 e9 06 00 02 e9 06 00 04 57 f4 00 04 57 f4 00 02 e9 7a 00 02 e9 7a 00 04 58 62 | ..W...........W...W....z...z..Xb |
| 2860 | 00 04 58 62 00 02 e9 e8 00 02 e9 e8 00 04 58 d4 00 04 58 d4 00 02 ea 5a 00 02 ea 5a 00 04 59 44 | ..Xb..........X...X....Z...Z..YD |
| 2880 | 00 04 59 44 00 02 ea ca 00 02 ea ca 00 04 5a 82 00 04 5a 82 00 02 ec 08 00 02 ec 08 00 04 5a f0 | ..YD..........Z...Z...........Z. |
| 28a0 | 00 04 5a f0 00 02 ec 76 00 02 ec 76 00 04 5b 64 00 04 5b 64 00 02 ec ea 00 02 ec ea 00 04 5c 4a | ..Z....v...v..[d..[d..........\J |
| 28c0 | 00 04 5c 4a 00 02 ed d0 00 02 ed d0 00 04 5c be 00 04 5c be 00 02 ee 44 00 02 ee 44 00 04 5e 82 | ..\J..........\...\....D...D..^. |
| 28e0 | 00 04 5e 82 00 02 f0 08 00 02 f0 08 00 04 5e f2 00 04 5e f2 00 02 f0 78 00 02 f0 78 00 04 5f 62 | ..^...........^...^....x...x.._b |
| 2900 | 00 04 5f 62 00 02 f0 e8 00 02 f0 e8 00 04 5f ce 00 04 5f ce 00 02 f1 54 00 02 f1 54 00 04 60 38 | .._b.........._..._....T...T..`8 |
| 2920 | 00 04 60 38 00 02 f1 be 00 02 f1 be 00 04 60 a4 00 04 60 a4 00 02 f2 2a 00 02 f2 2a 00 04 61 18 | ..`8..........`...`....*...*..a. |
| 2940 | 00 04 61 18 00 02 f2 9e 00 02 f2 9e 00 04 61 8c 00 04 61 8c 00 02 f3 12 00 02 f3 12 00 04 61 fa | ..a...........a...a...........a. |
| 2960 | 00 04 61 fa 00 02 f3 80 00 02 f3 80 00 04 62 70 00 04 62 70 00 02 f3 f6 00 02 f3 f6 00 04 62 e8 | ..a...........bp..bp..........b. |
| 2980 | 00 04 62 e8 00 02 f4 6e 00 02 f4 6e 00 04 63 5a 00 04 63 5a 00 02 f4 e0 00 02 f4 e0 00 04 63 ca | ..b....n...n..cZ..cZ..........c. |
| 29a0 | 00 04 63 ca 00 02 f5 50 00 02 f5 50 00 04 64 34 00 04 64 34 00 02 f5 ba 00 02 f5 ba 00 04 65 0e | ..c....P...P..d4..d4..........e. |
| 29c0 | 00 04 65 0e 00 02 f6 94 00 02 f6 94 00 04 65 7e 00 04 65 7e 00 02 f7 04 00 02 f7 04 00 04 66 4e | ..e...........e~..e~..........fN |
| 29e0 | 00 04 66 4e 00 02 f7 d4 00 02 f7 d4 00 04 66 c4 00 04 66 c4 00 02 f8 4a 00 02 f8 4a 00 04 67 30 | ..fN..........f...f....J...J..g0 |
| 2a00 | 00 04 67 30 00 02 f8 b6 00 02 f8 b6 00 04 67 aa 00 04 67 aa 00 02 f9 30 00 02 f9 30 00 04 68 14 | ..g0..........g...g....0...0..h. |
| 2a20 | 00 04 68 14 00 02 f9 9a 00 02 f9 9a 00 04 68 7c 00 04 68 7c 00 02 fa 02 00 02 fa 02 00 04 68 e8 | ..h...........h|..h|..........h. |
| 2a40 | 00 04 68 e8 00 02 fa 6e 00 02 fa 6e 00 04 69 52 00 04 69 52 00 02 fa d8 00 02 fa d8 00 04 69 c2 | ..h....n...n..iR..iR..........i. |
| 2a60 | 00 04 69 c2 00 02 fb 48 00 02 fb 48 00 04 6b 0c 00 04 6b 0c 00 02 fc 92 00 02 fc 92 00 04 6b da | ..i....H...H..k...k...........k. |
| 2a80 | 00 04 6b da 00 02 fd 60 00 02 fd 60 00 04 6c 48 00 04 6c 48 00 02 fd ce 00 02 fd ce 00 04 6c b2 | ..k....`...`..lH..lH..........l. |
| 2aa0 | 00 04 6c b2 00 02 fe 38 00 02 fe 38 00 04 6d 18 00 04 6d 18 00 02 fe 9e 00 02 fe 9e 00 04 6d 80 | ..l....8...8..m...m...........m. |
| 2ac0 | 00 04 6d 80 00 02 ff 06 00 02 ff 06 00 04 6d e8 00 04 6d e8 00 02 ff 6e 00 02 ff 6e 00 04 6e 50 | ..m...........m...m....n...n..nP |
| 2ae0 | 00 04 6e 50 00 02 ff d6 00 02 ff d6 00 04 6f 30 00 04 6f 30 00 03 00 b6 00 03 00 b6 00 04 6f 98 | ..nP..........o0..o0..........o. |
| 2b00 | 00 04 6f 98 00 03 01 1e 00 03 01 1e 00 04 70 06 00 04 70 06 00 03 01 8c 00 03 01 8c 00 04 71 ce | ..o...........p...p...........q. |
| 2b20 | 00 04 71 ce 00 03 03 54 00 03 03 54 00 04 72 3c 00 04 72 3c 00 03 03 c2 00 03 03 c2 5f 5f 49 4d | ..q....T...T..r<..r<........__IM |
| 2b40 | 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 5f 6e 74 64 6c 6c 00 5f 5f 4e 55 4c 4c 5f 49 4d 50 | PORT_DESCRIPTOR_ntdll.__NULL_IMP |
| 2b60 | 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 00 7f 6e 74 64 6c 6c 5f 4e 55 4c 4c 5f 54 48 55 4e 4b | ORT_DESCRIPTOR..ntdll_NULL_THUNK |
| 2b80 | 5f 44 41 54 41 00 44 62 67 55 69 43 6f 6e 6e 65 63 74 54 6f 44 62 67 00 5f 5f 69 6d 70 5f 44 62 | _DATA.DbgUiConnectToDbg.__imp_Db |
| 2ba0 | 67 55 69 43 6f 6e 6e 65 63 74 54 6f 44 62 67 00 44 62 67 55 69 57 61 69 74 53 74 61 74 65 43 68 | gUiConnectToDbg.DbgUiWaitStateCh |
| 2bc0 | 61 6e 67 65 00 5f 5f 69 6d 70 5f 44 62 67 55 69 57 61 69 74 53 74 61 74 65 43 68 61 6e 67 65 00 | ange.__imp_DbgUiWaitStateChange. |
| 2be0 | 44 62 67 55 69 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 44 62 67 55 69 43 6f 6e 74 69 6e 75 | DbgUiContinue.__imp_DbgUiContinu |
| 2c00 | 65 00 44 62 67 55 69 53 74 6f 70 44 65 62 75 67 67 69 6e 67 00 5f 5f 69 6d 70 5f 44 62 67 55 69 | e.DbgUiStopDebugging.__imp_DbgUi |
| 2c20 | 53 74 6f 70 44 65 62 75 67 67 69 6e 67 00 44 62 67 55 69 44 65 62 75 67 41 63 74 69 76 65 50 72 | StopDebugging.DbgUiDebugActivePr |
| 2c40 | 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 44 62 67 55 69 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 | ocess.__imp_DbgUiDebugActiveProc |
| 2c60 | 65 73 73 00 44 62 67 55 69 47 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 00 5f 5f | ess.DbgUiGetThreadDebugObject.__ |
| 2c80 | 69 6d 70 5f 44 62 67 55 69 47 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 00 44 62 | imp_DbgUiGetThreadDebugObject.Db |
| 2ca0 | 67 55 69 53 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 44 62 | gUiSetThreadDebugObject.__imp_Db |
| 2cc0 | 67 55 69 53 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 00 44 62 67 55 69 52 65 6d | gUiSetThreadDebugObject.DbgUiRem |
| 2ce0 | 6f 74 65 42 72 65 61 6b 69 6e 00 5f 5f 69 6d 70 5f 44 62 67 55 69 52 65 6d 6f 74 65 42 72 65 61 | oteBreakin.__imp_DbgUiRemoteBrea |
| 2d00 | 6b 69 6e 00 44 62 67 55 69 49 73 73 75 65 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 00 5f 5f 69 6d | kin.DbgUiIssueRemoteBreakin.__im |
| 2d20 | 70 5f 44 62 67 55 69 49 73 73 75 65 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 00 44 62 67 55 69 43 | p_DbgUiIssueRemoteBreakin.DbgUiC |
| 2d40 | 6f 6e 76 65 72 74 53 74 61 74 65 43 68 61 6e 67 65 53 74 72 75 63 74 75 72 65 00 5f 5f 69 6d 70 | onvertStateChangeStructure.__imp |
| 2d60 | 5f 44 62 67 55 69 43 6f 6e 76 65 72 74 53 74 61 74 65 43 68 61 6e 67 65 53 74 72 75 63 74 75 72 | _DbgUiConvertStateChangeStructur |
| 2d80 | 65 00 44 62 67 42 72 65 61 6b 50 6f 69 6e 74 00 5f 5f 69 6d 70 5f 44 62 67 42 72 65 61 6b 50 6f | e.DbgBreakPoint.__imp_DbgBreakPo |
| 2da0 | 69 6e 74 00 44 62 67 50 72 69 6e 74 00 5f 5f 69 6d 70 5f 44 62 67 50 72 69 6e 74 00 44 62 67 50 | int.DbgPrint.__imp_DbgPrint.DbgP |
| 2dc0 | 72 69 6e 74 45 78 00 5f 5f 69 6d 70 5f 44 62 67 50 72 69 6e 74 45 78 00 5f 5f 69 6d 70 5f 76 44 | rintEx.__imp_DbgPrintEx.__imp_vD |
| 2de0 | 62 67 50 72 69 6e 74 45 78 00 76 44 62 67 50 72 69 6e 74 45 78 00 5f 5f 69 6d 70 5f 76 44 62 67 | bgPrintEx.vDbgPrintEx.__imp_vDbg |
| 2e00 | 50 72 69 6e 74 45 78 57 69 74 68 50 72 65 66 69 78 00 76 44 62 67 50 72 69 6e 74 45 78 57 69 74 | PrintExWithPrefix.vDbgPrintExWit |
| 2e20 | 68 50 72 65 66 69 78 00 44 62 67 50 72 69 6e 74 52 65 74 75 72 6e 43 6f 6e 74 72 6f 6c 43 00 5f | hPrefix.DbgPrintReturnControlC._ |
| 2e40 | 5f 69 6d 70 5f 44 62 67 50 72 69 6e 74 52 65 74 75 72 6e 43 6f 6e 74 72 6f 6c 43 00 44 62 67 50 | _imp_DbgPrintReturnControlC.DbgP |
| 2e60 | 72 6f 6d 70 74 00 5f 5f 69 6d 70 5f 44 62 67 50 72 6f 6d 70 74 00 44 62 67 55 73 65 72 42 72 65 | rompt.__imp_DbgPrompt.DbgUserBre |
| 2e80 | 61 6b 50 6f 69 6e 74 00 5f 5f 69 6d 70 5f 44 62 67 55 73 65 72 42 72 65 61 6b 50 6f 69 6e 74 00 | akPoint.__imp_DbgUserBreakPoint. |
| 2ea0 | 44 62 67 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 44 62 67 | DbgSetDebugFilterState.__imp_Dbg |
| 2ec0 | 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 44 62 67 51 75 65 72 79 44 65 62 75 | SetDebugFilterState.DbgQueryDebu |
| 2ee0 | 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 44 62 67 51 75 65 72 79 44 65 62 75 67 | gFilterState.__imp_DbgQueryDebug |
| 2f00 | 46 69 6c 74 65 72 53 74 61 74 65 00 4b 69 55 73 65 72 41 70 63 44 69 73 70 61 74 63 68 65 72 00 | FilterState.KiUserApcDispatcher. |
| 2f20 | 5f 5f 69 6d 70 5f 4b 69 55 73 65 72 41 70 63 44 69 73 70 61 74 63 68 65 72 00 4b 69 55 73 65 72 | __imp_KiUserApcDispatcher.KiUser |
| 2f40 | 43 61 6c 6c 62 61 63 6b 44 69 73 70 61 74 63 68 65 72 00 5f 5f 69 6d 70 5f 4b 69 55 73 65 72 43 | CallbackDispatcher.__imp_KiUserC |
| 2f60 | 61 6c 6c 62 61 63 6b 44 69 73 70 61 74 63 68 65 72 00 4b 69 55 73 65 72 45 78 63 65 70 74 69 6f | allbackDispatcher.KiUserExceptio |
| 2f80 | 6e 44 69 73 70 61 74 63 68 65 72 00 5f 5f 69 6d 70 5f 4b 69 55 73 65 72 45 78 63 65 70 74 69 6f | nDispatcher.__imp_KiUserExceptio |
| 2fa0 | 6e 44 69 73 70 61 74 63 68 65 72 00 4b 69 52 61 69 73 65 55 73 65 72 45 78 63 65 70 74 69 6f 6e | nDispatcher.KiRaiseUserException |
| 2fc0 | 44 69 73 70 61 74 63 68 65 72 00 5f 5f 69 6d 70 5f 4b 69 52 61 69 73 65 55 73 65 72 45 78 63 65 | Dispatcher.__imp_KiRaiseUserExce |
| 2fe0 | 70 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72 00 4c 64 72 41 63 63 65 73 73 52 65 73 6f 75 72 63 | ptionDispatcher.LdrAccessResourc |
| 3000 | 65 00 5f 5f 69 6d 70 5f 4c 64 72 41 63 63 65 73 73 52 65 73 6f 75 72 63 65 00 4c 64 72 45 6e 75 | e.__imp_LdrAccessResource.LdrEnu |
| 3020 | 6d 65 72 61 74 65 4c 6f 61 64 65 64 4d 6f 64 75 6c 65 73 00 5f 5f 69 6d 70 5f 4c 64 72 45 6e 75 | merateLoadedModules.__imp_LdrEnu |
| 3040 | 6d 65 72 61 74 65 4c 6f 61 64 65 64 4d 6f 64 75 6c 65 73 00 4c 64 72 45 6e 75 6d 52 65 73 6f 75 | merateLoadedModules.LdrEnumResou |
| 3060 | 72 63 65 73 00 5f 5f 69 6d 70 5f 4c 64 72 45 6e 75 6d 52 65 73 6f 75 72 63 65 73 00 4c 64 72 46 | rces.__imp_LdrEnumResources.LdrF |
| 3080 | 69 6e 64 45 6e 74 72 79 46 6f 72 41 64 64 72 65 73 73 00 5f 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 | indEntryForAddress.__imp_LdrFind |
| 30a0 | 45 6e 74 72 79 46 6f 72 41 64 64 72 65 73 73 00 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 5f | EntryForAddress.LdrFindResource_ |
| 30c0 | 55 00 5f 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 5f 55 00 4c 64 72 46 69 6e | U.__imp_LdrFindResource_U.LdrFin |
| 30e0 | 64 52 65 73 6f 75 72 63 65 45 78 5f 55 00 5f 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 52 65 73 6f 75 | dResourceEx_U.__imp_LdrFindResou |
| 3100 | 72 63 65 45 78 5f 55 00 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 44 69 72 65 63 74 6f 72 79 | rceEx_U.LdrFindResourceDirectory |
| 3120 | 5f 55 00 5f 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 44 69 72 65 63 74 6f 72 | _U.__imp_LdrFindResourceDirector |
| 3140 | 79 5f 55 00 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 4c 64 72 47 65 74 | y_U.LdrGetDllHandle.__imp_LdrGet |
| 3160 | 44 6c 6c 48 61 6e 64 6c 65 00 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 45 78 00 5f 5f 69 6d | DllHandle.LdrGetDllHandleEx.__im |
| 3180 | 70 5f 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 45 78 00 4c 64 72 48 6f 74 50 61 74 63 68 52 | p_LdrGetDllHandleEx.LdrHotPatchR |
| 31a0 | 6f 75 74 69 6e 65 00 5f 5f 69 6d 70 5f 4c 64 72 48 6f 74 50 61 74 63 68 52 6f 75 74 69 6e 65 00 | outine.__imp_LdrHotPatchRoutine. |
| 31c0 | 4c 64 72 41 64 64 52 65 66 44 6c 6c 00 5f 5f 69 6d 70 5f 4c 64 72 41 64 64 52 65 66 44 6c 6c 00 | LdrAddRefDll.__imp_LdrAddRefDll. |
| 31e0 | 4c 64 72 47 65 74 4b 6e 6f 77 6e 44 6c 6c 53 65 63 74 69 6f 6e 48 61 6e 64 6c 65 00 5f 5f 69 6d | LdrGetKnownDllSectionHandle.__im |
| 3200 | 70 5f 4c 64 72 47 65 74 4b 6e 6f 77 6e 44 6c 6c 53 65 63 74 69 6f 6e 48 61 6e 64 6c 65 00 4c 64 | p_LdrGetKnownDllSectionHandle.Ld |
| 3220 | 72 47 65 74 50 72 6f 63 65 64 75 72 65 41 64 64 72 65 73 73 00 5f 5f 69 6d 70 5f 4c 64 72 47 65 | rGetProcedureAddress.__imp_LdrGe |
| 3240 | 74 50 72 6f 63 65 64 75 72 65 41 64 64 72 65 73 73 00 4c 64 72 49 6e 69 74 69 61 6c 69 7a 65 54 | tProcedureAddress.LdrInitializeT |
| 3260 | 68 75 6e 6b 00 5f 5f 69 6d 70 5f 4c 64 72 49 6e 69 74 69 61 6c 69 7a 65 54 68 75 6e 6b 00 4c 64 | hunk.__imp_LdrInitializeThunk.Ld |
| 3280 | 72 4c 6f 61 64 44 6c 6c 00 5f 5f 69 6d 70 5f 4c 64 72 4c 6f 61 64 44 6c 6c 00 4c 64 72 50 72 6f | rLoadDll.__imp_LdrLoadDll.LdrPro |
| 32a0 | 63 65 73 73 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 00 5f 5f 69 6d 70 | cessInitializationComplete.__imp |
| 32c0 | 5f 4c 64 72 50 72 6f 63 65 73 73 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 | _LdrProcessInitializationComplet |
| 32e0 | 65 00 4c 64 72 53 65 74 44 6c 6c 4d 61 6e 69 66 65 73 74 50 72 6f 62 65 72 00 5f 5f 69 6d 70 5f | e.LdrSetDllManifestProber.__imp_ |
| 3300 | 4c 64 72 53 65 74 44 6c 6c 4d 61 6e 69 66 65 73 74 50 72 6f 62 65 72 00 4c 64 72 4c 6f 63 6b 4c | LdrSetDllManifestProber.LdrLockL |
| 3320 | 6f 61 64 65 72 4c 6f 63 6b 00 5f 5f 69 6d 70 5f 4c 64 72 4c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 | oaderLock.__imp_LdrLockLoaderLoc |
| 3340 | 6b 00 4c 64 72 53 65 74 41 70 70 43 6f 6d 70 61 74 44 6c 6c 52 65 64 69 72 65 63 74 69 6f 6e 43 | k.LdrSetAppCompatDllRedirectionC |
| 3360 | 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 4c 64 72 53 65 74 41 70 70 43 6f 6d 70 61 74 44 6c 6c | allback.__imp_LdrSetAppCompatDll |
| 3380 | 52 65 64 69 72 65 63 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 00 4c 64 72 53 68 75 74 64 6f 77 6e 50 | RedirectionCallback.LdrShutdownP |
| 33a0 | 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4c 64 72 53 68 75 74 64 6f 77 6e 50 72 6f 63 65 73 73 00 | rocess.__imp_LdrShutdownProcess. |
| 33c0 | 4c 64 72 53 68 75 74 64 6f 77 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4c 64 72 53 68 75 74 64 | LdrShutdownThread.__imp_LdrShutd |
| 33e0 | 6f 77 6e 54 68 72 65 61 64 00 4c 64 72 55 6e 6c 6f 61 64 44 6c 6c 00 5f 5f 69 6d 70 5f 4c 64 72 | ownThread.LdrUnloadDll.__imp_Ldr |
| 3400 | 55 6e 6c 6f 61 64 44 6c 6c 00 4c 64 72 55 6e 6c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 00 5f 5f | UnloadDll.LdrUnlockLoaderLock.__ |
| 3420 | 69 6d 70 5f 4c 64 72 55 6e 6c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 00 4c 64 72 44 69 73 61 62 | imp_LdrUnlockLoaderLock.LdrDisab |
| 3440 | 6c 65 54 68 72 65 61 64 43 61 6c 6c 6f 75 74 73 46 6f 72 44 6c 6c 00 5f 5f 69 6d 70 5f 4c 64 72 | leThreadCalloutsForDll.__imp_Ldr |
| 3460 | 44 69 73 61 62 6c 65 54 68 72 65 61 64 43 61 6c 6c 6f 75 74 73 46 6f 72 44 6c 6c 00 4c 64 72 49 | DisableThreadCalloutsForDll.LdrI |
| 3480 | 6e 69 74 53 68 69 6d 45 6e 67 69 6e 65 44 79 6e 61 6d 69 63 00 5f 5f 69 6d 70 5f 4c 64 72 49 6e | nitShimEngineDynamic.__imp_LdrIn |
| 34a0 | 69 74 53 68 69 6d 45 6e 67 69 6e 65 44 79 6e 61 6d 69 63 00 4e 6c 73 4d 62 43 6f 64 65 50 61 67 | itShimEngineDynamic.NlsMbCodePag |
| 34c0 | 65 54 61 67 00 5f 5f 69 6d 70 5f 4e 6c 73 4d 62 43 6f 64 65 50 61 67 65 54 61 67 00 4e 6c 73 4d | eTag.__imp_NlsMbCodePageTag.NlsM |
| 34e0 | 62 4f 65 6d 43 6f 64 65 50 61 67 65 54 61 67 00 5f 5f 69 6d 70 5f 4e 6c 73 4d 62 4f 65 6d 43 6f | bOemCodePageTag.__imp_NlsMbOemCo |
| 3500 | 64 65 50 61 67 65 54 61 67 00 4e 6c 73 41 6e 73 69 43 6f 64 65 50 61 67 65 00 5f 5f 69 6d 70 5f | dePageTag.NlsAnsiCodePage.__imp_ |
| 3520 | 4e 6c 73 41 6e 73 69 43 6f 64 65 50 61 67 65 00 50 66 78 46 69 6e 64 50 72 65 66 69 78 00 5f 5f | NlsAnsiCodePage.PfxFindPrefix.__ |
| 3540 | 69 6d 70 5f 50 66 78 46 69 6e 64 50 72 65 66 69 78 00 50 66 78 49 6e 69 74 69 61 6c 69 7a 65 00 | imp_PfxFindPrefix.PfxInitialize. |
| 3560 | 5f 5f 69 6d 70 5f 50 66 78 49 6e 69 74 69 61 6c 69 7a 65 00 50 66 78 49 6e 73 65 72 74 50 72 65 | __imp_PfxInitialize.PfxInsertPre |
| 3580 | 66 69 78 00 5f 5f 69 6d 70 5f 50 66 78 49 6e 73 65 72 74 50 72 65 66 69 78 00 50 66 78 52 65 6d | fix.__imp_PfxInsertPrefix.PfxRem |
| 35a0 | 6f 76 65 50 72 65 66 69 78 00 5f 5f 69 6d 70 5f 50 66 78 52 65 6d 6f 76 65 50 72 65 66 69 78 00 | ovePrefix.__imp_PfxRemovePrefix. |
| 35c0 | 52 74 6c 41 62 6f 72 74 52 58 61 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 62 6f 72 74 52 58 61 63 | RtlAbortRXact.__imp_RtlAbortRXac |
| 35e0 | 74 00 52 74 6c 41 62 73 6f 6c 75 74 65 54 6f 53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 00 5f 5f | t.RtlAbsoluteToSelfRelativeSD.__ |
| 3600 | 69 6d 70 5f 52 74 6c 41 62 73 6f 6c 75 74 65 54 6f 53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 00 | imp_RtlAbsoluteToSelfRelativeSD. |
| 3620 | 52 74 6c 41 63 71 75 69 72 65 50 65 62 4c 6f 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 71 75 69 | RtlAcquirePebLock.__imp_RtlAcqui |
| 3640 | 72 65 50 65 62 4c 6f 63 6b 00 52 74 6c 41 63 71 75 69 72 65 50 72 69 76 69 6c 65 67 65 00 5f 5f | rePebLock.RtlAcquirePrivilege.__ |
| 3660 | 69 6d 70 5f 52 74 6c 41 63 71 75 69 72 65 50 72 69 76 69 6c 65 67 65 00 52 74 6c 41 63 71 75 69 | imp_RtlAcquirePrivilege.RtlAcqui |
| 3680 | 72 65 52 65 73 6f 75 72 63 65 45 78 63 6c 75 73 69 76 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 71 | reResourceExclusive.__imp_RtlAcq |
| 36a0 | 75 69 72 65 52 65 73 6f 75 72 63 65 45 78 63 6c 75 73 69 76 65 00 52 74 6c 41 63 71 75 69 72 65 | uireResourceExclusive.RtlAcquire |
| 36c0 | 52 65 73 6f 75 72 63 65 53 68 61 72 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 71 75 69 72 65 52 | ResourceShared.__imp_RtlAcquireR |
| 36e0 | 65 73 6f 75 72 63 65 53 68 61 72 65 64 00 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 | esourceShared.RtlActivateActivat |
| 3700 | 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 | ionContextUnsafeFast.__imp_RtlAc |
| 3720 | 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 | tivateActivationContextUnsafeFas |
| 3740 | 74 00 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 41 63 65 00 5f 5f 69 6d 70 5f 52 | t.RtlAddAccessAllowedAce.__imp_R |
| 3760 | 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 41 63 65 00 52 74 6c 41 64 64 41 63 63 65 | tlAddAccessAllowedAce.RtlAddAcce |
| 3780 | 73 73 41 6c 6c 6f 77 65 64 41 63 65 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 63 63 65 73 | ssAllowedAceEx.__imp_RtlAddAcces |
| 37a0 | 73 41 6c 6c 6f 77 65 64 41 63 65 45 78 00 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 | sAllowedAceEx.RtlAddAccessAllowe |
| 37c0 | 64 4f 62 6a 65 63 74 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c | dObjectAce.__imp_RtlAddAccessAll |
| 37e0 | 6f 77 65 64 4f 62 6a 65 63 74 41 63 65 00 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 | owedObjectAce.RtlAddAccessDenied |
| 3800 | 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65 00 | Ace.__imp_RtlAddAccessDeniedAce. |
| 3820 | 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65 45 78 00 5f 5f 69 6d 70 5f 52 74 | RtlAddAccessDeniedAceEx.__imp_Rt |
| 3840 | 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65 45 78 00 52 74 6c 41 64 64 41 63 63 65 | lAddAccessDeniedAceEx.RtlAddAcce |
| 3860 | 73 73 44 65 6e 69 65 64 4f 62 6a 65 63 74 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 63 | ssDeniedObjectAce.__imp_RtlAddAc |
| 3880 | 63 65 73 73 44 65 6e 69 65 64 4f 62 6a 65 63 74 41 63 65 00 52 74 6c 41 64 64 43 6f 6d 70 6f 75 | cessDeniedObjectAce.RtlAddCompou |
| 38a0 | 6e 64 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 43 6f 6d 70 6f 75 6e 64 41 63 65 00 52 74 | ndAce.__imp_RtlAddCompoundAce.Rt |
| 38c0 | 6c 41 64 64 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 63 65 00 52 74 6c 41 64 64 41 63 | lAddAce.__imp_RtlAddAce.RtlAddAc |
| 38e0 | 74 69 6f 6e 54 6f 52 58 61 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 63 74 69 6f 6e 54 6f | tionToRXact.__imp_RtlAddActionTo |
| 3900 | 52 58 61 63 74 00 52 74 6c 41 64 64 41 74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d | RXact.RtlAddAtomToAtomTable.__im |
| 3920 | 70 5f 52 74 6c 41 64 64 41 74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 41 64 64 41 74 | p_RtlAddAtomToAtomTable.RtlAddAt |
| 3940 | 74 72 69 62 75 74 65 41 63 74 69 6f 6e 54 6f 52 58 61 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 | tributeActionToRXact.__imp_RtlAd |
| 3960 | 64 41 74 74 72 69 62 75 74 65 41 63 74 69 6f 6e 54 6f 52 58 61 63 74 00 52 74 6c 41 64 64 41 75 | dAttributeActionToRXact.RtlAddAu |
| 3980 | 64 69 74 41 63 63 65 73 73 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 75 64 69 74 41 63 | ditAccessAce.__imp_RtlAddAuditAc |
| 39a0 | 63 65 73 73 41 63 65 00 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 41 63 65 45 78 00 5f | cessAce.RtlAddAuditAccessAceEx._ |
| 39c0 | 5f 69 6d 70 5f 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 41 63 65 45 78 00 52 74 6c 41 | _imp_RtlAddAuditAccessAceEx.RtlA |
| 39e0 | 64 64 41 75 64 69 74 41 63 63 65 73 73 4f 62 6a 65 63 74 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c | ddAuditAccessObjectAce.__imp_Rtl |
| 3a00 | 41 64 64 41 75 64 69 74 41 63 63 65 73 73 4f 62 6a 65 63 74 41 63 65 00 52 74 6c 41 64 64 72 65 | AddAuditAccessObjectAce.RtlAddre |
| 3a20 | 73 73 49 6e 53 65 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 72 65 73 | ssInSectionTable.__imp_RtlAddres |
| 3a40 | 73 49 6e 53 65 63 74 69 6f 6e 54 61 62 6c 65 00 52 74 6c 41 64 6a 75 73 74 50 72 69 76 69 6c 65 | sInSectionTable.RtlAdjustPrivile |
| 3a60 | 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 00 52 74 6c 41 | ge.__imp_RtlAdjustPrivilege.RtlA |
| 3a80 | 6c 6c 6f 63 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 5f 5f | llocateActivationContextStack.__ |
| 3aa0 | 69 6d 70 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 | imp_RtlAllocateActivationContext |
| 3ac0 | 53 74 61 63 6b 00 52 74 6c 41 6c 6c 6f 63 61 74 65 41 6e 64 49 6e 69 74 69 61 6c 69 7a 65 53 69 | Stack.RtlAllocateAndInitializeSi |
| 3ae0 | 64 00 5f 5f 69 6d 70 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 41 6e 64 49 6e 69 74 69 61 6c 69 7a 65 | d.__imp_RtlAllocateAndInitialize |
| 3b00 | 53 69 64 00 52 74 6c 41 6c 6c 6f 63 61 74 65 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 | Sid.RtlAllocateHandle.__imp_RtlA |
| 3b20 | 6c 6c 6f 63 61 74 65 48 61 6e 64 6c 65 00 52 74 6c 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 5f 5f | llocateHandle.RtlAllocateHeap.__ |
| 3b40 | 69 6d 70 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 52 74 6c 41 6e 73 69 43 68 61 72 54 | imp_RtlAllocateHeap.RtlAnsiCharT |
| 3b60 | 6f 55 6e 69 63 6f 64 65 43 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 41 6e 73 69 43 68 61 72 54 6f | oUnicodeChar.__imp_RtlAnsiCharTo |
| 3b80 | 55 6e 69 63 6f 64 65 43 68 61 72 00 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f | UnicodeChar.RtlAnsiStringToUnico |
| 3ba0 | 64 65 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 | deSize.__imp_RtlAnsiStringToUnic |
| 3bc0 | 6f 64 65 53 69 7a 65 00 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 74 | odeSize.RtlAnsiStringToUnicodeSt |
| 3be0 | 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 | ring.__imp_RtlAnsiStringToUnicod |
| 3c00 | 65 53 74 72 69 6e 67 00 52 74 6c 41 70 70 65 6e 64 41 73 63 69 69 7a 54 6f 53 74 72 69 6e 67 00 | eString.RtlAppendAsciizToString. |
| 3c20 | 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 65 6e 64 41 73 63 69 69 7a 54 6f 53 74 72 69 6e 67 00 52 74 | __imp_RtlAppendAsciizToString.Rt |
| 3c40 | 6c 41 70 70 65 6e 64 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 41 | lAppendStringToString.__imp_RtlA |
| 3c60 | 70 70 65 6e 64 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 52 74 6c 41 70 70 65 6e 64 55 6e 69 | ppendStringToString.RtlAppendUni |
| 3c80 | 63 6f 64 65 54 6f 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 65 6e 64 55 6e 69 63 | codeToString.__imp_RtlAppendUnic |
| 3ca0 | 6f 64 65 54 6f 53 74 72 69 6e 67 00 52 74 6c 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69 | odeToString.RtlAppendUnicodeStri |
| 3cc0 | 6e 67 54 6f 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 65 6e 64 55 6e 69 63 6f 64 | ngToString.__imp_RtlAppendUnicod |
| 3ce0 | 65 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 52 74 6c 41 70 70 6c 69 63 61 74 69 6f 6e 56 65 | eStringToString.RtlApplicationVe |
| 3d00 | 72 69 66 69 65 72 53 74 6f 70 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 6c 69 63 61 74 69 6f 6e 56 | rifierStop.__imp_RtlApplicationV |
| 3d20 | 65 72 69 66 69 65 72 53 74 6f 70 00 52 74 6c 41 70 70 6c 79 52 58 61 63 74 00 5f 5f 69 6d 70 5f | erifierStop.RtlApplyRXact.__imp_ |
| 3d40 | 52 74 6c 41 70 70 6c 79 52 58 61 63 74 00 52 74 6c 41 70 70 6c 79 52 58 61 63 74 4e 6f 46 6c 75 | RtlApplyRXact.RtlApplyRXactNoFlu |
| 3d60 | 73 68 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 6c 79 52 58 61 63 74 4e 6f 46 6c 75 73 68 00 52 74 | sh.__imp_RtlApplyRXactNoFlush.Rt |
| 3d80 | 6c 41 72 65 41 6c 6c 41 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 00 5f 5f 69 6d 70 5f 52 74 6c | lAreAllAccessesGranted.__imp_Rtl |
| 3da0 | 41 72 65 41 6c 6c 41 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 00 52 74 6c 41 72 65 41 6e 79 41 | AreAllAccessesGranted.RtlAreAnyA |
| 3dc0 | 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 41 72 65 41 6e 79 41 63 | ccessesGranted.__imp_RtlAreAnyAc |
| 3de0 | 63 65 73 73 65 73 47 72 61 6e 74 65 64 00 52 74 6c 41 72 65 42 69 74 73 43 6c 65 61 72 00 5f 5f | cessesGranted.RtlAreBitsClear.__ |
| 3e00 | 69 6d 70 5f 52 74 6c 41 72 65 42 69 74 73 43 6c 65 61 72 00 52 74 6c 41 72 65 42 69 74 73 53 65 | imp_RtlAreBitsClear.RtlAreBitsSe |
| 3e20 | 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 72 65 42 69 74 73 53 65 74 00 52 74 6c 41 73 73 65 72 74 00 | t.__imp_RtlAreBitsSet.RtlAssert. |
| 3e40 | 5f 5f 69 6d 70 5f 52 74 6c 41 73 73 65 72 74 00 52 74 6c 43 68 61 72 54 6f 49 6e 74 65 67 65 72 | __imp_RtlAssert.RtlCharToInteger |
| 3e60 | 00 5f 5f 69 6d 70 5f 52 74 6c 43 68 61 72 54 6f 49 6e 74 65 67 65 72 00 52 74 6c 43 68 65 63 6b | .__imp_RtlCharToInteger.RtlCheck |
| 3e80 | 46 6f 72 4f 72 70 68 61 6e 65 64 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 73 00 5f 5f 69 6d | ForOrphanedCriticalSections.__im |
| 3ea0 | 70 5f 52 74 6c 43 68 65 63 6b 46 6f 72 4f 72 70 68 61 6e 65 64 43 72 69 74 69 63 61 6c 53 65 63 | p_RtlCheckForOrphanedCriticalSec |
| 3ec0 | 74 69 6f 6e 73 00 52 74 6c 43 68 65 63 6b 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 | tions.RtlCheckProcessParameters. |
| 3ee0 | 5f 5f 69 6d 70 5f 52 74 6c 43 68 65 63 6b 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 | __imp_RtlCheckProcessParameters. |
| 3f00 | 52 74 6c 43 68 65 63 6b 52 65 67 69 73 74 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 68 65 | RtlCheckRegistryKey.__imp_RtlChe |
| 3f20 | 63 6b 52 65 67 69 73 74 72 79 4b 65 79 00 52 74 6c 43 6c 65 61 72 41 6c 6c 42 69 74 73 00 5f 5f | ckRegistryKey.RtlClearAllBits.__ |
| 3f40 | 69 6d 70 5f 52 74 6c 43 6c 65 61 72 41 6c 6c 42 69 74 73 00 52 74 6c 43 6c 65 61 72 42 69 74 73 | imp_RtlClearAllBits.RtlClearBits |
| 3f60 | 00 5f 5f 69 6d 70 5f 52 74 6c 43 6c 65 61 72 42 69 74 73 00 52 74 6c 43 6f 6d 70 61 63 74 48 65 | .__imp_RtlClearBits.RtlCompactHe |
| 3f80 | 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 61 63 74 48 65 61 70 00 52 74 6c 43 6f 6d 70 61 | ap.__imp_RtlCompactHeap.RtlCompa |
| 3fa0 | 72 65 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 00 | reMemory.__imp_RtlCompareMemory. |
| 3fc0 | 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 55 6c 6f 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 | RtlCompareMemoryUlong.__imp_RtlC |
| 3fe0 | 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 55 6c 6f 6e 67 00 52 74 6c 43 6f 6d 70 61 72 65 53 74 72 69 | ompareMemoryUlong.RtlCompareStri |
| 4000 | 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 61 72 65 53 74 72 69 6e 67 00 52 74 6c 43 6f 6d | ng.__imp_RtlCompareString.RtlCom |
| 4020 | 70 61 72 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 61 | pareUnicodeString.__imp_RtlCompa |
| 4040 | 72 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 43 6f 6d 70 72 65 73 73 42 75 66 66 65 | reUnicodeString.RtlCompressBuffe |
| 4060 | 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 72 65 73 73 42 75 66 66 65 72 00 52 74 6c 43 6f 6d | r.__imp_RtlCompressBuffer.RtlCom |
| 4080 | 70 75 74 65 43 72 63 33 32 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 75 74 65 43 72 63 33 32 00 | puteCrc32.__imp_RtlComputeCrc32. |
| 40a0 | 52 74 6c 43 6f 6d 70 75 74 65 49 6d 70 6f 72 74 54 61 62 6c 65 48 61 73 68 00 5f 5f 69 6d 70 5f | RtlComputeImportTableHash.__imp_ |
| 40c0 | 52 74 6c 43 6f 6d 70 75 74 65 49 6d 70 6f 72 74 54 61 62 6c 65 48 61 73 68 00 52 74 6c 43 6f 6e | RtlComputeImportTableHash.RtlCon |
| 40e0 | 76 65 72 74 45 78 63 6c 75 73 69 76 65 54 6f 53 68 61 72 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 43 | vertExclusiveToShared.__imp_RtlC |
| 4100 | 6f 6e 76 65 72 74 45 78 63 6c 75 73 69 76 65 54 6f 53 68 61 72 65 64 00 52 74 6c 43 6f 6e 76 65 | onvertExclusiveToShared.RtlConve |
| 4120 | 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c 75 73 69 76 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e | rtSharedToExclusive.__imp_RtlCon |
| 4140 | 76 65 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c 75 73 69 76 65 00 52 74 6c 43 6f 6e 76 65 72 74 | vertSharedToExclusive.RtlConvert |
| 4160 | 53 69 64 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e 76 | SidToUnicodeString.__imp_RtlConv |
| 4180 | 65 72 74 53 69 64 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 43 6f 6e 76 65 72 74 | ertSidToUnicodeString.RtlConvert |
| 41a0 | 55 69 4c 69 73 74 54 6f 41 70 69 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e 76 65 72 74 | UiListToApiList.__imp_RtlConvert |
| 41c0 | 55 69 4c 69 73 74 54 6f 41 70 69 4c 69 73 74 00 52 74 6c 43 6f 6e 76 65 72 74 54 6f 41 75 74 6f | UiListToApiList.RtlConvertToAuto |
| 41e0 | 49 6e 68 65 72 69 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 | InheritSecurityObject.__imp_RtlC |
| 4200 | 6f 6e 76 65 72 74 54 6f 41 75 74 6f 49 6e 68 65 72 69 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 | onvertToAutoInheritSecurityObjec |
| 4220 | 74 00 52 74 6c 43 6f 70 79 4c 75 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 4c 75 69 64 00 | t.RtlCopyLuid.__imp_RtlCopyLuid. |
| 4240 | 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e 64 41 74 74 72 69 62 75 74 65 73 41 72 72 61 79 00 5f 5f | RtlCopyLuidAndAttributesArray.__ |
| 4260 | 69 6d 70 5f 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e 64 41 74 74 72 69 62 75 74 65 73 41 72 72 61 | imp_RtlCopyLuidAndAttributesArra |
| 4280 | 79 00 52 74 6c 43 6f 70 79 4d 61 70 70 65 64 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 | y.RtlCopyMappedMemory.__imp_RtlC |
| 42a0 | 6f 70 79 4d 61 70 70 65 64 4d 65 6d 6f 72 79 00 52 74 6c 43 6f 70 79 53 65 63 75 72 69 74 79 44 | opyMappedMemory.RtlCopySecurityD |
| 42c0 | 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 53 65 63 75 72 69 74 79 44 | escriptor.__imp_RtlCopySecurityD |
| 42e0 | 65 73 63 72 69 70 74 6f 72 00 52 74 6c 43 6f 70 79 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f | escriptor.RtlCopySid.__imp_RtlCo |
| 4300 | 70 79 53 69 64 00 52 74 6c 43 6f 70 79 53 69 64 41 6e 64 41 74 74 72 69 62 75 74 65 73 41 72 72 | pySid.RtlCopySidAndAttributesArr |
| 4320 | 61 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 53 69 64 41 6e 64 41 74 74 72 69 62 75 74 65 73 | ay.__imp_RtlCopySidAndAttributes |
| 4340 | 41 72 72 61 79 00 52 74 6c 43 6f 70 79 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 | Array.RtlCopyString.__imp_RtlCop |
| 4360 | 79 53 74 72 69 6e 67 00 52 74 6c 43 6f 70 79 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 | yString.RtlCopyUnicodeString.__i |
| 4380 | 6d 70 5f 52 74 6c 43 6f 70 79 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 43 72 65 61 74 | mp_RtlCopyUnicodeString.RtlCreat |
| 43a0 | 65 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 41 63 6c 00 52 74 6c 43 72 65 61 74 | eAcl.__imp_RtlCreateAcl.RtlCreat |
| 43c0 | 65 41 6e 64 53 65 74 53 44 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 41 6e 64 53 65 74 53 | eAndSetSD.__imp_RtlCreateAndSetS |
| 43e0 | 44 00 52 74 6c 43 72 65 61 74 65 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 | D.RtlCreateAtomTable.__imp_RtlCr |
| 4400 | 65 61 74 65 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 43 72 65 61 74 65 45 6e 76 69 72 6f 6e 6d 65 | eateAtomTable.RtlCreateEnvironme |
| 4420 | 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 52 74 | nt.__imp_RtlCreateEnvironment.Rt |
| 4440 | 6c 43 72 65 61 74 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 48 65 61 70 00 | lCreateHeap.__imp_RtlCreateHeap. |
| 4460 | 52 74 6c 43 72 65 61 74 65 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 5f 5f 69 6d 70 | RtlCreateProcessParameters.__imp |
| 4480 | 5f 52 74 6c 43 72 65 61 74 65 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 52 74 6c 43 | _RtlCreateProcessParameters.RtlC |
| 44a0 | 72 65 61 74 65 52 65 67 69 73 74 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 | reateRegistryKey.__imp_RtlCreate |
| 44c0 | 52 65 67 69 73 74 72 79 4b 65 79 00 52 74 6c 43 72 65 61 74 65 53 65 63 75 72 69 74 79 44 65 73 | RegistryKey.RtlCreateSecurityDes |
| 44e0 | 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 53 65 63 75 72 69 74 79 44 | criptor.__imp_RtlCreateSecurityD |
| 4500 | 65 73 63 72 69 70 74 6f 72 00 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | escriptor.RtlCreateUnicodeString |
| 4520 | 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 | .__imp_RtlCreateUnicodeString.Rt |
| 4540 | 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 46 72 6f 6d 41 73 63 69 69 7a 00 5f | lCreateUnicodeStringFromAsciiz._ |
| 4560 | 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 46 72 6f 6d 41 | _imp_RtlCreateUnicodeStringFromA |
| 4580 | 73 63 69 69 7a 00 52 74 6c 43 72 65 61 74 65 55 73 65 72 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 | sciiz.RtlCreateUserProcess.__imp |
| 45a0 | 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72 50 72 6f 63 65 73 73 00 52 74 6c 43 72 65 61 74 65 55 | _RtlCreateUserProcess.RtlCreateU |
| 45c0 | 73 65 72 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 | serSecurityObject.__imp_RtlCreat |
| 45e0 | 65 55 73 65 72 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 43 72 65 61 74 65 55 73 65 | eUserSecurityObject.RtlCreateUse |
| 4600 | 72 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72 54 68 72 65 61 | rThread.__imp_RtlCreateUserThrea |
| 4620 | 64 00 52 74 6c 45 78 69 74 55 73 65 72 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 52 74 6c 45 78 69 | d.RtlExitUserThread.__imp_RtlExi |
| 4640 | 74 55 73 65 72 54 68 72 65 61 64 00 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 | tUserThread.RtlDeactivateActivat |
| 4660 | 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 | ionContextUnsafeFast.__imp_RtlDe |
| 4680 | 61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 | activateActivationContextUnsafeF |
| 46a0 | 61 73 74 00 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 52 74 | ast.RtlDecompressBuffer.__imp_Rt |
| 46c0 | 6c 44 65 63 6f 6d 70 72 65 73 73 42 75 66 66 65 72 00 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 46 | lDecompressBuffer.RtlDecompressF |
| 46e0 | 72 61 67 6d 65 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 46 72 61 67 6d | ragment.__imp_RtlDecompressFragm |
| 4700 | 65 6e 74 00 52 74 6c 44 65 66 61 75 6c 74 4e 70 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 66 | ent.RtlDefaultNpAcl.__imp_RtlDef |
| 4720 | 61 75 6c 74 4e 70 41 63 6c 00 52 74 6c 44 65 6c 65 74 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c | aultNpAcl.RtlDelete.__imp_RtlDel |
| 4740 | 65 74 65 00 52 74 6c 44 65 6c 65 74 65 4e 6f 53 70 6c 61 79 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 | ete.RtlDeleteNoSplay.__imp_RtlDe |
| 4760 | 6c 65 74 65 4e 6f 53 70 6c 61 79 00 52 74 6c 44 65 6c 65 74 65 41 63 65 00 5f 5f 69 6d 70 5f 52 | leteNoSplay.RtlDeleteAce.__imp_R |
| 4780 | 74 6c 44 65 6c 65 74 65 41 63 65 00 52 74 6c 44 65 6c 65 74 65 41 74 6f 6d 46 72 6f 6d 41 74 6f | tlDeleteAce.RtlDeleteAtomFromAto |
| 47a0 | 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 41 74 6f 6d 46 72 6f 6d 41 74 | mTable.__imp_RtlDeleteAtomFromAt |
| 47c0 | 6f 6d 54 61 62 6c 65 00 52 74 6c 44 65 6c 65 74 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e | omTable.RtlDeleteCriticalSection |
| 47e0 | 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 | .__imp_RtlDeleteCriticalSection. |
| 4800 | 52 74 6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 5f 5f 69 | RtlDeleteElementGenericTable.__i |
| 4820 | 6d 70 5f 52 74 6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 | mp_RtlDeleteElementGenericTable. |
| 4840 | 52 74 6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 | RtlDeleteElementGenericTableAvl. |
| 4860 | 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 | __imp_RtlDeleteElementGenericTab |
| 4880 | 6c 65 41 76 6c 00 52 74 6c 44 65 6c 65 74 65 52 65 67 69 73 74 72 79 56 61 6c 75 65 00 5f 5f 69 | leAvl.RtlDeleteRegistryValue.__i |
| 48a0 | 6d 70 5f 52 74 6c 44 65 6c 65 74 65 52 65 67 69 73 74 72 79 56 61 6c 75 65 00 52 74 6c 44 65 6c | mp_RtlDeleteRegistryValue.RtlDel |
| 48c0 | 65 74 65 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 52 65 73 6f 75 | eteResource.__imp_RtlDeleteResou |
| 48e0 | 72 63 65 00 52 74 6c 44 65 6c 65 74 65 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d | rce.RtlDeleteSecurityObject.__im |
| 4900 | 70 5f 52 74 6c 44 65 6c 65 74 65 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 44 65 4e | p_RtlDeleteSecurityObject.RtlDeN |
| 4920 | 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 | ormalizeProcessParams.__imp_RtlD |
| 4940 | 65 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 52 74 6c 44 65 73 74 72 | eNormalizeProcessParams.RtlDestr |
| 4960 | 6f 79 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 73 74 72 6f 79 41 74 6f 6d | oyAtomTable.__imp_RtlDestroyAtom |
| 4980 | 54 61 62 6c 65 00 52 74 6c 44 65 73 74 72 6f 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 5f 5f 69 6d | Table.RtlDestroyEnvironment.__im |
| 49a0 | 70 5f 52 74 6c 44 65 73 74 72 6f 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 52 74 6c 44 65 73 74 72 | p_RtlDestroyEnvironment.RtlDestr |
| 49c0 | 6f 79 48 61 6e 64 6c 65 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 73 74 72 6f 79 48 61 | oyHandleTable.__imp_RtlDestroyHa |
| 49e0 | 6e 64 6c 65 54 61 62 6c 65 00 52 74 6c 44 65 73 74 72 6f 79 48 65 61 70 00 5f 5f 69 6d 70 5f 52 | ndleTable.RtlDestroyHeap.__imp_R |
| 4a00 | 74 6c 44 65 73 74 72 6f 79 48 65 61 70 00 52 74 6c 44 65 73 74 72 6f 79 50 72 6f 63 65 73 73 50 | tlDestroyHeap.RtlDestroyProcessP |
| 4a20 | 61 72 61 6d 65 74 65 72 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 73 74 72 6f 79 50 72 6f 63 65 73 | arameters.__imp_RtlDestroyProces |
| 4a40 | 73 50 61 72 61 6d 65 74 65 72 73 00 52 74 6c 44 65 74 65 72 6d 69 6e 65 44 6f 73 50 61 74 68 4e | sParameters.RtlDetermineDosPathN |
| 4a60 | 61 6d 65 54 79 70 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 74 65 72 6d 69 6e 65 44 6f 73 50 | ameType_U.__imp_RtlDetermineDosP |
| 4a80 | 61 74 68 4e 61 6d 65 54 79 70 65 5f 55 00 52 74 6c 44 6c 6c 53 68 75 74 64 6f 77 6e 49 6e 50 72 | athNameType_U.RtlDllShutdownInPr |
| 4aa0 | 6f 67 72 65 73 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 6c 6c 53 68 75 74 64 6f 77 6e 49 6e 50 72 6f | ogress.__imp_RtlDllShutdownInPro |
| 4ac0 | 67 72 65 73 73 00 52 74 6c 44 6f 65 73 46 69 6c 65 45 78 69 73 74 73 5f 55 00 5f 5f 69 6d 70 5f | gress.RtlDoesFileExists_U.__imp_ |
| 4ae0 | 52 74 6c 44 6f 65 73 46 69 6c 65 45 78 69 73 74 73 5f 55 00 52 74 6c 44 6f 73 50 61 74 68 4e 61 | RtlDoesFileExists_U.RtlDosPathNa |
| 4b00 | 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 74 61 74 75 73 00 5f 5f 69 6d | meToNtPathName_U_WithStatus.__im |
| 4b20 | 70 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 | p_RtlDosPathNameToNtPathName_U_W |
| 4b40 | 69 74 68 53 74 61 74 75 73 00 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 | ithStatus.RtlDosPathNameToRelati |
| 4b60 | 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f | veNtPathName_U_WithStatus.__imp_ |
| 4b80 | 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 | RtlDosPathNameToRelativeNtPathNa |
| 4ba0 | 6d 65 5f 55 5f 57 69 74 68 53 74 61 74 75 73 00 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f | me_U_WithStatus.RtlDosPathNameTo |
| 4bc0 | 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d | NtPathName_U.__imp_RtlDosPathNam |
| 4be0 | 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f | eToNtPathName_U.RtlDosPathNameTo |
| 4c00 | 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f | RelativeNtPathName_U.__imp_RtlDo |
| 4c20 | 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 | sPathNameToRelativeNtPathName_U. |
| 4c40 | 52 74 6c 4e 74 50 61 74 68 4e 61 6d 65 54 6f 44 6f 73 50 61 74 68 4e 61 6d 65 00 5f 5f 69 6d 70 | RtlNtPathNameToDosPathName.__imp |
| 4c60 | 5f 52 74 6c 4e 74 50 61 74 68 4e 61 6d 65 54 6f 44 6f 73 50 61 74 68 4e 61 6d 65 00 52 74 6c 44 | _RtlNtPathNameToDosPathName.RtlD |
| 4c80 | 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 73 53 65 61 72 63 | osSearchPath_U.__imp_RtlDosSearc |
| 4ca0 | 68 50 61 74 68 5f 55 00 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 73 74 72 00 5f 5f | hPath_U.RtlDosSearchPath_Ustr.__ |
| 4cc0 | 69 6d 70 5f 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 73 74 72 00 52 74 6c 44 6f 77 | imp_RtlDosSearchPath_Ustr.RtlDow |
| 4ce0 | 6e 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 77 6e 63 61 | ncaseUnicodeChar.__imp_RtlDownca |
| 4d00 | 73 65 55 6e 69 63 6f 64 65 43 68 61 72 00 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 | seUnicodeChar.RtlDowncaseUnicode |
| 4d20 | 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 53 | String.__imp_RtlDowncaseUnicodeS |
| 4d40 | 74 72 69 6e 67 00 52 74 6c 44 75 6d 70 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 | tring.RtlDumpResource.__imp_RtlD |
| 4d60 | 75 6d 70 52 65 73 6f 75 72 63 65 00 52 74 6c 44 75 70 6c 69 63 61 74 65 55 6e 69 63 6f 64 65 53 | umpResource.RtlDuplicateUnicodeS |
| 4d80 | 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 44 75 70 6c 69 63 61 74 65 55 6e 69 63 6f 64 65 53 | tring.__imp_RtlDuplicateUnicodeS |
| 4da0 | 74 72 69 6e 67 00 52 74 6c 45 6d 70 74 79 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 | tring.RtlEmptyAtomTable.__imp_Rt |
| 4dc0 | 6c 45 6d 70 74 79 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 45 6e 63 6f 64 65 50 6f 69 6e 74 65 72 | lEmptyAtomTable.RtlEncodePointer |
| 4de0 | 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 63 6f 64 65 50 6f 69 6e 74 65 72 00 52 74 6c 44 65 63 6f 64 | .__imp_RtlEncodePointer.RtlDecod |
| 4e00 | 65 50 6f 69 6e 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 63 6f 64 65 50 6f 69 6e 74 65 72 00 | ePointer.__imp_RtlDecodePointer. |
| 4e20 | 52 74 6c 45 6e 63 6f 64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c | RtlEncodeSystemPointer.__imp_Rtl |
| 4e40 | 45 6e 63 6f 64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 00 52 74 6c 44 65 63 6f 64 65 53 79 73 | EncodeSystemPointer.RtlDecodeSys |
| 4e60 | 74 65 6d 50 6f 69 6e 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 63 6f 64 65 53 79 73 74 65 6d | temPointer.__imp_RtlDecodeSystem |
| 4e80 | 50 6f 69 6e 74 65 72 00 52 74 6c 45 6e 61 62 6c 65 45 61 72 6c 79 43 72 69 74 69 63 61 6c 53 65 | Pointer.RtlEnableEarlyCriticalSe |
| 4ea0 | 63 74 69 6f 6e 45 76 65 6e 74 43 72 65 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 61 62 | ctionEventCreation.__imp_RtlEnab |
| 4ec0 | 6c 65 45 61 72 6c 79 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 45 76 65 6e 74 43 72 65 61 74 | leEarlyCriticalSectionEventCreat |
| 4ee0 | 69 6f 6e 00 52 74 6c 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d | ion.RtlEnterCriticalSection.__im |
| 4f00 | 70 5f 52 74 6c 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 49 73 43 | p_RtlEnterCriticalSection.RtlIsC |
| 4f20 | 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 | riticalSectionLocked.__imp_RtlIs |
| 4f40 | 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 00 52 74 6c 49 73 43 72 69 74 69 | CriticalSectionLocked.RtlIsCriti |
| 4f60 | 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 42 79 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 52 | calSectionLockedByThread.__imp_R |
| 4f80 | 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 42 79 54 68 72 65 61 | tlIsCriticalSectionLockedByThrea |
| 4fa0 | 64 00 52 74 6c 47 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 52 65 63 75 72 73 69 6f 6e | d.RtlGetCriticalSectionRecursion |
| 4fc0 | 43 6f 75 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f | Count.__imp_RtlGetCriticalSectio |
| 4fe0 | 6e 52 65 63 75 72 73 69 6f 6e 43 6f 75 6e 74 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 | nRecursionCount.RtlEnumerateGene |
| 5000 | 72 69 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 | ricTable.__imp_RtlEnumerateGener |
| 5020 | 69 63 54 61 62 6c 65 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 | icTable.RtlEnumerateGenericTable |
| 5040 | 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 | Avl.__imp_RtlEnumerateGenericTab |
| 5060 | 6c 65 41 76 6c 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 4c 69 | leAvl.RtlEnumerateGenericTableLi |
| 5080 | 6b 65 41 44 69 72 65 63 74 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 | keADirectory.__imp_RtlEnumerateG |
| 50a0 | 65 6e 65 72 69 63 54 61 62 6c 65 4c 69 6b 65 41 44 69 72 65 63 74 6f 72 79 00 52 74 6c 45 6e 75 | enericTableLikeADirectory.RtlEnu |
| 50c0 | 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e | merateGenericTableWithoutSplayin |
| 50e0 | 67 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 | g.__imp_RtlEnumerateGenericTable |
| 5100 | 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 | WithoutSplaying.RtlEnumerateGene |
| 5120 | 72 69 63 54 61 62 6c 65 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 41 76 6c 00 5f 5f 69 6d 70 | ricTableWithoutSplayingAvl.__imp |
| 5140 | 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74 68 6f 75 74 | _RtlEnumerateGenericTableWithout |
| 5160 | 53 70 6c 61 79 69 6e 67 41 76 6c 00 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73 73 48 65 61 70 73 00 | SplayingAvl.RtlEnumProcessHeaps. |
| 5180 | 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73 73 48 65 61 70 73 00 52 74 6c 45 71 75 | __imp_RtlEnumProcessHeaps.RtlEqu |
| 51a0 | 61 6c 43 6f 6d 70 75 74 65 72 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 43 6f 6d | alComputerName.__imp_RtlEqualCom |
| 51c0 | 70 75 74 65 72 4e 61 6d 65 00 52 74 6c 45 71 75 61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 00 5f 5f 69 | puterName.RtlEqualDomainName.__i |
| 51e0 | 6d 70 5f 52 74 6c 45 71 75 61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 00 52 74 6c 45 71 75 61 6c 4c 75 | mp_RtlEqualDomainName.RtlEqualLu |
| 5200 | 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 4c 75 69 64 00 52 74 6c 45 71 75 61 6c 50 72 | id.__imp_RtlEqualLuid.RtlEqualPr |
| 5220 | 65 66 69 78 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 50 72 65 66 69 78 53 69 64 00 | efixSid.__imp_RtlEqualPrefixSid. |
| 5240 | 52 74 6c 45 71 75 61 6c 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 53 69 64 00 52 74 | RtlEqualSid.__imp_RtlEqualSid.Rt |
| 5260 | 6c 45 71 75 61 6c 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 53 74 72 69 6e | lEqualString.__imp_RtlEqualStrin |
| 5280 | 67 00 52 74 6c 45 71 75 61 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 | g.RtlEqualUnicodeString.__imp_Rt |
| 52a0 | 6c 45 71 75 61 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 45 72 61 73 65 55 6e 69 63 | lEqualUnicodeString.RtlEraseUnic |
| 52c0 | 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 45 72 61 73 65 55 6e 69 63 6f 64 65 53 | odeString.__imp_RtlEraseUnicodeS |
| 52e0 | 74 72 69 6e 67 00 52 74 6c 45 78 70 61 6e 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 | tring.RtlExpandEnvironmentString |
| 5300 | 73 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 45 78 70 61 6e 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 | s_U.__imp_RtlExpandEnvironmentSt |
| 5320 | 72 69 6e 67 73 5f 55 00 52 74 6c 46 69 6c 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 46 | rings_U.RtlFillMemory.__imp_RtlF |
| 5340 | 69 6c 6c 4d 65 6d 6f 72 79 00 52 74 6c 46 69 6e 64 43 68 61 72 49 6e 55 6e 69 63 6f 64 65 53 74 | illMemory.RtlFindCharInUnicodeSt |
| 5360 | 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 43 68 61 72 49 6e 55 6e 69 63 6f 64 65 53 | ring.__imp_RtlFindCharInUnicodeS |
| 5380 | 74 72 69 6e 67 00 52 74 6c 46 69 6e 64 43 6c 65 61 72 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c | tring.RtlFindClearBits.__imp_Rtl |
| 53a0 | 46 69 6e 64 43 6c 65 61 72 42 69 74 73 00 52 74 6c 46 69 6e 64 43 6c 65 61 72 42 69 74 73 41 6e | FindClearBits.RtlFindClearBitsAn |
| 53c0 | 64 53 65 74 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72 42 69 74 73 41 6e 64 53 65 | dSet.__imp_RtlFindClearBitsAndSe |
| 53e0 | 74 00 52 74 6c 46 69 6e 64 43 6c 65 61 72 52 75 6e 73 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 | t.RtlFindClearRuns.__imp_RtlFind |
| 5400 | 43 6c 65 61 72 52 75 6e 73 00 52 74 6c 46 69 6e 64 4c 6f 6e 67 65 73 74 52 75 6e 43 6c 65 61 72 | ClearRuns.RtlFindLongestRunClear |
| 5420 | 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 4c 6f 6e 67 65 73 74 52 75 6e 43 6c 65 61 72 00 52 74 | .__imp_RtlFindLongestRunClear.Rt |
| 5440 | 6c 46 69 6e 64 4c 61 73 74 42 61 63 6b 77 61 72 64 52 75 6e 43 6c 65 61 72 00 5f 5f 69 6d 70 5f | lFindLastBackwardRunClear.__imp_ |
| 5460 | 52 74 6c 46 69 6e 64 4c 61 73 74 42 61 63 6b 77 61 72 64 52 75 6e 43 6c 65 61 72 00 52 74 6c 46 | RtlFindLastBackwardRunClear.RtlF |
| 5480 | 69 6e 64 4e 65 78 74 46 6f 72 77 61 72 64 52 75 6e 43 6c 65 61 72 00 5f 5f 69 6d 70 5f 52 74 6c | indNextForwardRunClear.__imp_Rtl |
| 54a0 | 46 69 6e 64 4e 65 78 74 46 6f 72 77 61 72 64 52 75 6e 43 6c 65 61 72 00 52 74 6c 46 69 6e 64 4d | FindNextForwardRunClear.RtlFindM |
| 54c0 | 65 73 73 61 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 4d 65 73 73 61 67 65 00 52 74 6c 46 | essage.__imp_RtlFindMessage.RtlF |
| 54e0 | 69 6e 64 53 65 74 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 53 65 74 42 69 74 73 00 | indSetBits.__imp_RtlFindSetBits. |
| 5500 | 52 74 6c 46 69 6e 64 53 65 74 42 69 74 73 41 6e 64 43 6c 65 61 72 00 5f 5f 69 6d 70 5f 52 74 6c | RtlFindSetBitsAndClear.__imp_Rtl |
| 5520 | 46 69 6e 64 53 65 74 42 69 74 73 41 6e 64 43 6c 65 61 72 00 52 74 6c 46 69 72 73 74 46 72 65 65 | FindSetBitsAndClear.RtlFirstFree |
| 5540 | 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 72 73 74 46 72 65 65 41 63 65 00 52 74 6c 46 6f 72 | Ace.__imp_RtlFirstFreeAce.RtlFor |
| 5560 | 6d 61 74 4d 65 73 73 61 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 67 | matMessage.__imp_RtlFormatMessag |
| 5580 | 65 00 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 46 6f | e.RtlFormatMessageEx.__imp_RtlFo |
| 55a0 | 72 6d 61 74 4d 65 73 73 61 67 65 45 78 00 52 74 6c 46 6f 72 6d 61 74 43 75 72 72 65 6e 74 55 73 | rmatMessageEx.RtlFormatCurrentUs |
| 55c0 | 65 72 4b 65 79 50 61 74 68 00 5f 5f 69 6d 70 5f 52 74 6c 46 6f 72 6d 61 74 43 75 72 72 65 6e 74 | erKeyPath.__imp_RtlFormatCurrent |
| 55e0 | 55 73 65 72 4b 65 79 50 61 74 68 00 52 74 6c 46 72 65 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e | UserKeyPath.RtlFreeActivationCon |
| 5600 | 74 65 78 74 53 74 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 41 63 74 69 76 61 74 69 6f | textStack.__imp_RtlFreeActivatio |
| 5620 | 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 52 74 6c 46 72 65 65 41 6e 73 69 53 74 72 69 6e 67 00 | nContextStack.RtlFreeAnsiString. |
| 5640 | 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 41 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 46 72 65 65 48 | __imp_RtlFreeAnsiString.RtlFreeH |
| 5660 | 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 48 61 6e 64 6c 65 00 52 74 6c 46 72 65 | andle.__imp_RtlFreeHandle.RtlFre |
| 5680 | 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 48 65 61 70 00 52 74 6c 46 72 65 65 4f | eHeap.__imp_RtlFreeHeap.RtlFreeO |
| 56a0 | 65 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 4f 65 6d 53 74 72 69 6e 67 00 | emString.__imp_RtlFreeOemString. |
| 56c0 | 52 74 6c 46 72 65 65 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 53 69 64 00 52 74 6c 46 | RtlFreeSid.__imp_RtlFreeSid.RtlF |
| 56e0 | 72 65 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 55 6e | reeUnicodeString.__imp_RtlFreeUn |
| 5700 | 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 46 72 65 65 55 73 65 72 54 68 72 65 61 64 53 74 61 | icodeString.RtlFreeUserThreadSta |
| 5720 | 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 55 73 65 72 54 68 72 65 61 64 53 74 61 63 6b 00 | ck.__imp_RtlFreeUserThreadStack. |
| 5740 | 52 74 6c 47 65 6e 65 72 61 74 65 38 64 6f 74 33 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 | RtlGenerate8dot3Name.__imp_RtlGe |
| 5760 | 6e 65 72 61 74 65 38 64 6f 74 33 4e 61 6d 65 00 52 74 6c 47 65 74 41 63 65 00 5f 5f 69 6d 70 5f | nerate8dot3Name.RtlGetAce.__imp_ |
| 5780 | 52 74 6c 47 65 74 41 63 65 00 52 74 6c 47 65 74 43 6f 6d 70 72 65 73 73 69 6f 6e 57 6f 72 6b 53 | RtlGetAce.RtlGetCompressionWorkS |
| 57a0 | 70 61 63 65 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 6f 6d 70 72 65 73 73 69 6f 6e | paceSize.__imp_RtlGetCompression |
| 57c0 | 57 6f 72 6b 53 70 61 63 65 53 69 7a 65 00 52 74 6c 47 65 74 43 6f 6e 74 72 6f 6c 53 65 63 75 72 | WorkSpaceSize.RtlGetControlSecur |
| 57e0 | 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 6f 6e 74 72 6f | ityDescriptor.__imp_RtlGetContro |
| 5800 | 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 43 6f 6e 74 72 6f | lSecurityDescriptor.RtlSetContro |
| 5820 | 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 | lSecurityDescriptor.__imp_RtlSet |
| 5840 | 43 6f 6e 74 72 6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 | ControlSecurityDescriptor.RtlSet |
| 5860 | 41 74 74 72 69 62 75 74 65 73 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 | AttributesSecurityDescriptor.__i |
| 5880 | 6d 70 5f 52 74 6c 53 65 74 41 74 74 72 69 62 75 74 65 73 53 65 63 75 72 69 74 79 44 65 73 63 72 | mp_RtlSetAttributesSecurityDescr |
| 58a0 | 69 70 74 6f 72 00 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 73 00 5f | iptor.RtlSetEnvironmentStrings._ |
| 58c0 | 5f 69 6d 70 5f 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 73 00 52 74 | _imp_RtlSetEnvironmentStrings.Rt |
| 58e0 | 6c 47 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c | lGetCurrentDirectory_U.__imp_Rtl |
| 5900 | 47 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 5f 55 00 52 74 6c 47 65 74 43 75 72 72 | GetCurrentDirectory_U.RtlGetCurr |
| 5920 | 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 | entProcessorNumber.__imp_RtlGetC |
| 5940 | 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 52 74 6c 53 65 74 55 6e 68 61 | urrentProcessorNumber.RtlSetUnha |
| 5960 | 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 | ndledExceptionFilter.__imp_RtlSe |
| 5980 | 74 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 52 74 6c 47 65 74 | tUnhandledExceptionFilter.RtlGet |
| 59a0 | 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c | DaclSecurityDescriptor.__imp_Rtl |
| 59c0 | 47 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 47 65 74 | GetDaclSecurityDescriptor.RtlGet |
| 59e0 | 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 | ElementGenericTable.__imp_RtlGet |
| 5a00 | 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 52 74 6c 47 65 74 45 6c 65 6d 65 6e | ElementGenericTable.RtlGetElemen |
| 5a20 | 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 45 6c 65 | tGenericTableAvl.__imp_RtlGetEle |
| 5a40 | 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 52 74 6c 47 65 74 46 72 61 6d 65 00 | mentGenericTableAvl.RtlGetFrame. |
| 5a60 | 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 46 72 61 6d 65 00 52 74 6c 47 65 74 4e 61 74 69 76 65 53 79 | __imp_RtlGetFrame.RtlGetNativeSy |
| 5a80 | 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4e 61 74 69 | stemInformation.__imp_RtlGetNati |
| 5aa0 | 76 65 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 47 65 74 4e 74 56 65 72 73 | veSystemInformation.RtlGetNtVers |
| 5ac0 | 69 6f 6e 4e 75 6d 62 65 72 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4e 74 56 65 72 73 69 6f 6e | ionNumbers.__imp_RtlGetNtVersion |
| 5ae0 | 4e 75 6d 62 65 72 73 00 52 74 6c 47 55 49 44 46 72 6f 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f | Numbers.RtlGUIDFromString.__imp_ |
| 5b00 | 52 74 6c 47 55 49 44 46 72 6f 6d 53 74 72 69 6e 67 00 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 | RtlGUIDFromString.RtlGetFullPath |
| 5b20 | 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f | Name_U.__imp_RtlGetFullPathName_ |
| 5b40 | 55 00 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 73 74 72 45 78 00 5f 5f 69 6d | U.RtlGetFullPathName_UstrEx.__im |
| 5b60 | 70 5f 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 73 74 72 45 78 00 52 74 6c 47 | p_RtlGetFullPathName_UstrEx.RtlG |
| 5b80 | 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f | etGroupSecurityDescriptor.__imp_ |
| 5ba0 | 52 74 6c 47 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 | RtlGetGroupSecurityDescriptor.Rt |
| 5bc0 | 6c 47 65 74 4c 61 73 74 4e 74 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4c 61 73 | lGetLastNtStatus.__imp_RtlGetLas |
| 5be0 | 74 4e 74 53 74 61 74 75 73 00 52 74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 5f | tNtStatus.RtlGetLastWin32Error._ |
| 5c00 | 5f 69 6d 70 5f 52 74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 52 74 6c 47 65 74 | _imp_RtlGetLastWin32Error.RtlGet |
| 5c20 | 4c 6f 6e 67 65 73 74 4e 74 50 61 74 68 4c 65 6e 67 74 68 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 | LongestNtPathLength.__imp_RtlGet |
| 5c40 | 4c 6f 6e 67 65 73 74 4e 74 50 61 74 68 4c 65 6e 67 74 68 00 52 74 6c 47 65 74 55 73 65 72 49 6e | LongestNtPathLength.RtlGetUserIn |
| 5c60 | 66 6f 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 55 73 65 72 49 6e 66 6f 48 65 61 70 00 | foHeap.__imp_RtlGetUserInfoHeap. |
| 5c80 | 52 74 6c 47 65 74 55 6e 6c 6f 61 64 45 76 65 6e 74 54 72 61 63 65 00 5f 5f 69 6d 70 5f 52 74 6c | RtlGetUnloadEventTrace.__imp_Rtl |
| 5ca0 | 47 65 74 55 6e 6c 6f 61 64 45 76 65 6e 74 54 72 61 63 65 00 52 74 6c 47 65 74 4e 74 47 6c 6f 62 | GetUnloadEventTrace.RtlGetNtGlob |
| 5cc0 | 61 6c 46 6c 61 67 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4e 74 47 6c 6f 62 61 6c 46 6c 61 67 | alFlags.__imp_RtlGetNtGlobalFlag |
| 5ce0 | 73 00 52 74 6c 47 65 74 4e 74 50 72 6f 64 75 63 74 54 79 70 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 | s.RtlGetNtProductType.__imp_RtlG |
| 5d00 | 65 74 4e 74 50 72 6f 64 75 63 74 54 79 70 65 00 52 74 6c 47 65 74 4f 77 6e 65 72 53 65 63 75 72 | etNtProductType.RtlGetOwnerSecur |
| 5d20 | 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4f 77 6e 65 72 53 | ityDescriptor.__imp_RtlGetOwnerS |
| 5d40 | 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 47 65 74 53 61 63 6c 53 65 63 75 | ecurityDescriptor.RtlGetSaclSecu |
| 5d60 | 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 53 61 63 6c 53 | rityDescriptor.__imp_RtlGetSaclS |
| 5d80 | 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 47 65 74 53 65 63 75 72 69 74 79 | ecurityDescriptor.RtlGetSecurity |
| 5da0 | 44 65 73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 | DescriptorRMControl.__imp_RtlGet |
| 5dc0 | 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 52 74 6c 47 | SecurityDescriptorRMControl.RtlG |
| 5de0 | 65 74 54 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 54 68 | etThreadErrorMode.__imp_RtlGetTh |
| 5e00 | 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 00 52 74 6c 47 65 74 56 65 72 73 69 6f 6e 00 5f 5f 69 6d | readErrorMode.RtlGetVersion.__im |
| 5e20 | 70 5f 52 74 6c 47 65 74 56 65 72 73 69 6f 6e 00 52 74 6c 49 64 65 6e 74 69 66 69 65 72 41 75 74 | p_RtlGetVersion.RtlIdentifierAut |
| 5e40 | 68 6f 72 69 74 79 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 49 64 65 6e 74 69 66 69 65 72 41 75 74 | horitySid.__imp_RtlIdentifierAut |
| 5e60 | 68 6f 72 69 74 79 53 69 64 00 52 74 6c 49 6d 61 67 65 44 69 72 65 63 74 6f 72 79 45 6e 74 72 79 | horitySid.RtlImageDirectoryEntry |
| 5e80 | 54 6f 44 61 74 61 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 61 67 65 44 69 72 65 63 74 6f 72 79 45 6e | ToData.__imp_RtlImageDirectoryEn |
| 5ea0 | 74 72 79 54 6f 44 61 74 61 00 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 00 5f 5f 69 6d 70 | tryToData.RtlImageNtHeader.__imp |
| 5ec0 | 5f 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 00 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 | _RtlImageNtHeader.RtlImageNtHead |
| 5ee0 | 65 72 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 45 78 00 52 74 | erEx.__imp_RtlImageNtHeaderEx.Rt |
| 5f00 | 6c 49 6d 61 67 65 52 76 61 54 6f 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 61 67 | lImageRvaToSection.__imp_RtlImag |
| 5f20 | 65 52 76 61 54 6f 53 65 63 74 69 6f 6e 00 52 74 6c 49 6d 61 67 65 52 76 61 54 6f 56 61 00 5f 5f | eRvaToSection.RtlImageRvaToVa.__ |
| 5f40 | 69 6d 70 5f 52 74 6c 49 6d 61 67 65 52 76 61 54 6f 56 61 00 52 74 6c 49 6d 70 65 72 73 6f 6e 61 | imp_RtlImageRvaToVa.RtlImpersona |
| 5f60 | 74 65 53 65 6c 66 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 70 65 72 73 6f 6e 61 74 65 53 65 6c 66 00 | teSelf.__imp_RtlImpersonateSelf. |
| 5f80 | 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 41 | RtlInitAnsiString.__imp_RtlInitA |
| 5fa0 | 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67 45 78 00 5f 5f | nsiString.RtlInitAnsiStringEx.__ |
| 5fc0 | 69 6d 70 5f 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67 45 78 00 52 74 6c 49 6e 69 74 69 | imp_RtlInitAnsiStringEx.RtlIniti |
| 5fe0 | 61 6c 69 7a 65 41 74 6f 6d 50 61 63 6b 61 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 | alizeAtomPackage.__imp_RtlInitia |
| 6000 | 6c 69 7a 65 41 74 6f 6d 50 61 63 6b 61 67 65 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 42 69 74 | lizeAtomPackage.RtlInitializeBit |
| 6020 | 4d 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 42 69 74 4d 61 70 00 52 74 | Map.__imp_RtlInitializeBitMap.Rt |
| 6040 | 6c 49 6e 69 74 69 61 6c 69 7a 65 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 | lInitializeContext.__imp_RtlInit |
| 6060 | 69 61 6c 69 7a 65 43 6f 6e 74 65 78 74 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 | ializeContext.RtlInitializeCriti |
| 6080 | 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 72 | calSection.__imp_RtlInitializeCr |
| 60a0 | 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 | iticalSection.RtlInitializeCriti |
| 60c0 | 63 61 6c 53 65 63 74 69 6f 6e 41 6e 64 53 70 69 6e 43 6f 75 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c | calSectionAndSpinCount.__imp_Rtl |
| 60e0 | 49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 41 6e 64 53 70 69 6e | InitializeCriticalSectionAndSpin |
| 6100 | 43 6f 75 6e 74 00 52 74 6c 53 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 53 70 69 6e 43 | Count.RtlSetCriticalSectionSpinC |
| 6120 | 6f 75 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e | ount.__imp_RtlSetCriticalSection |
| 6140 | 53 70 69 6e 43 6f 75 6e 74 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 | SpinCount.RtlInitializeGenericTa |
| 6160 | 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 | ble.__imp_RtlInitializeGenericTa |
| 6180 | 62 6c 65 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c | ble.RtlInitializeGenericTableAvl |
| 61a0 | 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62 6c 65 | .__imp_RtlInitializeGenericTable |
| 61c0 | 41 76 6c 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61 6e 64 6c 65 54 61 62 6c 65 00 5f 5f 69 | Avl.RtlInitializeHandleTable.__i |
| 61e0 | 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61 6e 64 6c 65 54 61 62 6c 65 00 52 74 6c 49 | mp_RtlInitializeHandleTable.RtlI |
| 6200 | 6e 69 74 69 61 6c 69 7a 65 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 | nitializeResource.__imp_RtlIniti |
| 6220 | 61 6c 69 7a 65 52 65 73 6f 75 72 63 65 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 58 61 63 74 | alizeResource.RtlInitializeRXact |
| 6240 | 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 58 61 63 74 00 52 74 6c 49 6e 69 | .__imp_RtlInitializeRXact.RtlIni |
| 6260 | 74 69 61 6c 69 7a 65 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 69 | tializeSid.__imp_RtlInitializeSi |
| 6280 | 64 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 4c 69 73 74 48 65 61 64 00 5f 5f 69 6d 70 5f 52 | d.RtlInitializeSListHead.__imp_R |
| 62a0 | 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 4c 69 73 74 48 65 61 64 00 52 74 6c 49 6e 69 74 53 74 72 | tlInitializeSListHead.RtlInitStr |
| 62c0 | 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 53 74 72 69 6e 67 00 52 74 6c 49 6e 69 74 55 | ing.__imp_RtlInitString.RtlInitU |
| 62e0 | 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 | nicodeString.__imp_RtlInitUnicod |
| 6300 | 65 53 74 72 69 6e 67 00 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 45 78 00 5f | eString.RtlInitUnicodeStringEx._ |
| 6320 | 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 45 78 00 52 74 6c 49 | _imp_RtlInitUnicodeStringEx.RtlI |
| 6340 | 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 | nsertElementGenericTable.__imp_R |
| 6360 | 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 52 74 6c 49 | tlInsertElementGenericTable.RtlI |
| 6380 | 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 5f 5f 69 6d | nsertElementGenericTableAvl.__im |
| 63a0 | 70 5f 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 | p_RtlInsertElementGenericTableAv |
| 63c0 | 6c 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 | l.RtlInsertElementGenericTableFu |
| 63e0 | 6c 6c 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 | ll.__imp_RtlInsertElementGeneric |
| 6400 | 54 61 62 6c 65 46 75 6c 6c 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 | TableFull.RtlInsertElementGeneri |
| 6420 | 63 54 61 62 6c 65 46 75 6c 6c 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 73 65 72 74 45 6c 65 | cTableFullAvl.__imp_RtlInsertEle |
| 6440 | 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 41 76 6c 00 52 74 6c 49 6e 74 65 67 | mentGenericTableFullAvl.RtlInteg |
| 6460 | 65 72 54 6f 43 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 67 65 72 54 6f 43 68 61 72 00 | erToChar.__imp_RtlIntegerToChar. |
| 6480 | 52 74 6c 49 6e 74 65 67 65 72 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f | RtlIntegerToUnicodeString.__imp_ |
| 64a0 | 52 74 6c 49 6e 74 65 67 65 72 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 49 6e 74 | RtlIntegerToUnicodeString.RtlInt |
| 64c0 | 65 72 6c 6f 63 6b 65 64 46 6c 75 73 68 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 | erlockedFlushSList.__imp_RtlInte |
| 64e0 | 72 6c 6f 63 6b 65 64 46 6c 75 73 68 53 4c 69 73 74 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 | rlockedFlushSList.RtlInterlocked |
| 6500 | 50 6f 70 45 6e 74 72 79 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b | PopEntrySList.__imp_RtlInterlock |
| 6520 | 65 64 50 6f 70 45 6e 74 72 79 53 4c 69 73 74 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 75 | edPopEntrySList.RtlInterlockedPu |
| 6540 | 73 68 45 6e 74 72 79 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 | shEntrySList.__imp_RtlInterlocke |
| 6560 | 64 50 75 73 68 45 6e 74 72 79 53 4c 69 73 74 00 52 74 6c 51 75 65 72 79 44 65 70 74 68 53 4c 69 | dPushEntrySList.RtlQueryDepthSLi |
| 6580 | 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 44 65 70 74 68 53 4c 69 73 74 00 52 74 6c 49 | st.__imp_RtlQueryDepthSList.RtlI |
| 65a0 | 6e 74 65 72 6c 6f 63 6b 65 64 50 75 73 68 4c 69 73 74 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 | nterlockedPushListSList.__imp_Rt |
| 65c0 | 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 75 73 68 4c 69 73 74 53 4c 69 73 74 00 52 74 6c 46 69 72 | lInterlockedPushListSList.RtlFir |
| 65e0 | 73 74 45 6e 74 72 79 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 72 73 74 45 6e 74 72 79 | stEntrySList.__imp_RtlFirstEntry |
| 6600 | 53 4c 69 73 74 00 52 74 6c 49 6e 74 36 34 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f | SList.RtlInt64ToUnicodeString.__ |
| 6620 | 69 6d 70 5f 52 74 6c 49 6e 74 36 34 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 49 | imp_RtlInt64ToUnicodeString.RtlI |
| 6640 | 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 | pv4AddressToStringA.__imp_RtlIpv |
| 6660 | 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 | 4AddressToStringA.RtlIpv4Address |
| 6680 | 54 6f 53 74 72 69 6e 67 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f | ToStringW.__imp_RtlIpv4AddressTo |
| 66a0 | 53 74 72 69 6e 67 57 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 | StringW.RtlIpv4AddressToStringEx |
| 66c0 | 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 | A.__imp_RtlIpv4AddressToStringEx |
| 66e0 | 41 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 00 5f 5f 69 6d | A.RtlIpv4AddressToStringExW.__im |
| 6700 | 70 5f 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 00 52 74 6c 49 | p_RtlIpv4AddressToStringExW.RtlI |
| 6720 | 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 | pv4StringToAddressA.__imp_RtlIpv |
| 6740 | 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 41 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 | 4StringToAddressA.RtlIpv4StringT |
| 6760 | 6f 41 64 64 72 65 73 73 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 | oAddressW.__imp_RtlIpv4StringToA |
| 6780 | 64 64 72 65 73 73 57 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 | ddressW.RtlIpv4StringToAddressEx |
| 67a0 | 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 | A.__imp_RtlIpv4StringToAddressEx |
| 67c0 | 41 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 00 5f 5f 69 6d | A.RtlIpv4StringToAddressExW.__im |
| 67e0 | 70 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 00 52 74 6c 49 | p_RtlIpv4StringToAddressExW.RtlI |
| 6800 | 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 | pv6AddressToStringA.__imp_RtlIpv |
| 6820 | 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 | 6AddressToStringA.RtlIpv6Address |
| 6840 | 54 6f 53 74 72 69 6e 67 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f | ToStringW.__imp_RtlIpv6AddressTo |
| 6860 | 53 74 72 69 6e 67 57 00 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 | StringW.RtlIpv6AddressToStringEx |
| 6880 | 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 | A.__imp_RtlIpv6AddressToStringEx |
| 68a0 | 41 00 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 00 5f 5f 69 6d | A.RtlIpv6AddressToStringExW.__im |
| 68c0 | 70 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 00 52 74 6c 49 | p_RtlIpv6AddressToStringExW.RtlI |
| 68e0 | 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 | pv6StringToAddressA.__imp_RtlIpv |
| 6900 | 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 41 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 | 6StringToAddressA.RtlIpv6StringT |
| 6920 | 6f 41 64 64 72 65 73 73 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 | oAddressW.__imp_RtlIpv6StringToA |
| 6940 | 64 64 72 65 73 73 57 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 | ddressW.RtlIpv6StringToAddressEx |
| 6960 | 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 | A.__imp_RtlIpv6StringToAddressEx |
| 6980 | 41 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 00 5f 5f 69 6d | A.RtlIpv6StringToAddressExW.__im |
| 69a0 | 70 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 00 52 74 6c 49 | p_RtlIpv6StringToAddressExW.RtlI |
| 69c0 | 73 44 6f 73 44 65 76 69 63 65 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 44 6f 73 44 | sDosDeviceName_U.__imp_RtlIsDosD |
| 69e0 | 65 76 69 63 65 4e 61 6d 65 5f 55 00 52 74 6c 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 | eviceName_U.RtlIsGenericTableEmp |
| 6a00 | 74 79 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74 79 00 | ty.__imp_RtlIsGenericTableEmpty. |
| 6a20 | 52 74 6c 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74 79 41 76 6c 00 5f 5f 69 6d 70 5f | RtlIsGenericTableEmptyAvl.__imp_ |
| 6a40 | 52 74 6c 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74 79 41 76 6c 00 52 74 6c 49 73 4e | RtlIsGenericTableEmptyAvl.RtlIsN |
| 6a60 | 61 6d 65 4c 65 67 61 6c 44 4f 53 38 44 6f 74 33 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 4e 61 6d 65 | ameLegalDOS8Dot3.__imp_RtlIsName |
| 6a80 | 4c 65 67 61 6c 44 4f 53 38 44 6f 74 33 00 52 74 6c 49 73 56 61 6c 69 64 48 61 6e 64 6c 65 00 5f | LegalDOS8Dot3.RtlIsValidHandle._ |
| 6aa0 | 5f 69 6d 70 5f 52 74 6c 49 73 56 61 6c 69 64 48 61 6e 64 6c 65 00 52 74 6c 49 73 56 61 6c 69 64 | _imp_RtlIsValidHandle.RtlIsValid |
| 6ac0 | 49 6e 64 65 78 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 56 61 6c 69 64 49 6e 64 65 | IndexHandle.__imp_RtlIsValidInde |
| 6ae0 | 78 48 61 6e 64 6c 65 00 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72 54 6f 43 68 61 72 00 5f 5f | xHandle.RtlLargeIntegerToChar.__ |
| 6b00 | 69 6d 70 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72 54 6f 43 68 61 72 00 52 74 6c 4c 65 61 | imp_RtlLargeIntegerToChar.RtlLea |
| 6b20 | 76 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 4c 65 61 76 65 | veCriticalSection.__imp_RtlLeave |
| 6b40 | 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 4c 65 6e 67 74 68 52 65 71 75 69 72 65 | CriticalSection.RtlLengthRequire |
| 6b60 | 64 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 4c 65 6e 67 74 68 52 65 71 75 69 72 65 64 53 69 64 00 | dSid.__imp_RtlLengthRequiredSid. |
| 6b80 | 52 74 6c 4c 65 6e 67 74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d | RtlLengthSecurityDescriptor.__im |
| 6ba0 | 70 5f 52 74 6c 4c 65 6e 67 74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 | p_RtlLengthSecurityDescriptor.Rt |
| 6bc0 | 6c 4c 65 6e 67 74 68 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 4c 65 6e 67 74 68 53 69 64 00 52 74 | lLengthSid.__imp_RtlLengthSid.Rt |
| 6be0 | 6c 4c 6f 63 6b 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 63 6b 48 65 61 70 00 52 74 6c 4c | lLockHeap.__imp_RtlLockHeap.RtlL |
| 6c00 | 6f 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f | ookupAtomInAtomTable.__imp_RtlLo |
| 6c20 | 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 | okupAtomInAtomTable.RtlLookupEle |
| 6c40 | 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 | mentGenericTable.__imp_RtlLookup |
| 6c60 | 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 | ElementGenericTable.RtlLookupEle |
| 6c80 | 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f | mentGenericTableAvl.__imp_RtlLoo |
| 6ca0 | 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 52 74 6c 4c 6f 6f | kupElementGenericTableAvl.RtlLoo |
| 6cc0 | 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 00 5f 5f 69 6d 70 | kupElementGenericTableFull.__imp |
| 6ce0 | 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c | _RtlLookupElementGenericTableFul |
| 6d00 | 6c 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 | l.RtlLookupElementGenericTableFu |
| 6d20 | 6c 6c 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 | llAvl.__imp_RtlLookupElementGene |
| 6d40 | 72 69 63 54 61 62 6c 65 46 75 6c 6c 41 76 6c 00 52 74 6c 4d 61 6b 65 53 65 6c 66 52 65 6c 61 74 | ricTableFullAvl.RtlMakeSelfRelat |
| 6d60 | 69 76 65 53 44 00 5f 5f 69 6d 70 5f 52 74 6c 4d 61 6b 65 53 65 6c 66 52 65 6c 61 74 69 76 65 53 | iveSD.__imp_RtlMakeSelfRelativeS |
| 6d80 | 44 00 52 74 6c 4d 61 70 47 65 6e 65 72 69 63 4d 61 73 6b 00 5f 5f 69 6d 70 5f 52 74 6c 4d 61 70 | D.RtlMapGenericMask.__imp_RtlMap |
| 6da0 | 47 65 6e 65 72 69 63 4d 61 73 6b 00 52 74 6c 4d 61 70 53 65 63 75 72 69 74 79 45 72 72 6f 72 54 | GenericMask.RtlMapSecurityErrorT |
| 6dc0 | 6f 4e 74 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 4d 61 70 53 65 63 75 72 69 74 79 45 72 | oNtStatus.__imp_RtlMapSecurityEr |
| 6de0 | 72 6f 72 54 6f 4e 74 53 74 61 74 75 73 00 52 74 6c 4d 6f 76 65 4d 65 6d 6f 72 79 00 5f 5f 69 6d | rorToNtStatus.RtlMoveMemory.__im |
| 6e00 | 70 5f 52 74 6c 4d 6f 76 65 4d 65 6d 6f 72 79 00 52 74 6c 43 6f 6e 73 6f 6c 65 4d 75 6c 74 69 42 | p_RtlMoveMemory.RtlConsoleMultiB |
| 6e20 | 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e 73 6f 6c 65 4d 75 | yteToUnicodeN.__imp_RtlConsoleMu |
| 6e40 | 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e 00 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f | ltiByteToUnicodeN.RtlMultiByteTo |
| 6e60 | 55 6e 69 63 6f 64 65 4e 00 5f 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 | UnicodeN.__imp_RtlMultiByteToUni |
| 6e80 | 63 6f 64 65 4e 00 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 00 | codeN.RtlMultiByteToUnicodeSize. |
| 6ea0 | 5f 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 00 | __imp_RtlMultiByteToUnicodeSize. |
| 6ec0 | 52 74 6c 4d 75 6c 74 69 70 6c 65 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 | RtlMultipleAllocateHeap.__imp_Rt |
| 6ee0 | 6c 4d 75 6c 74 69 70 6c 65 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 52 74 6c 4d 75 6c 74 69 70 6c | lMultipleAllocateHeap.RtlMultipl |
| 6f00 | 65 46 72 65 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 70 6c 65 46 72 65 65 48 | eFreeHeap.__imp_RtlMultipleFreeH |
| 6f20 | 65 61 70 00 52 74 6c 4e 65 77 49 6e 73 74 61 6e 63 65 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 | eap.RtlNewInstanceSecurityObject |
| 6f40 | 00 5f 5f 69 6d 70 5f 52 74 6c 4e 65 77 49 6e 73 74 61 6e 63 65 53 65 63 75 72 69 74 79 4f 62 6a | .__imp_RtlNewInstanceSecurityObj |
| 6f60 | 65 63 74 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 47 72 61 6e 74 65 64 41 63 63 65 73 73 00 | ect.RtlNewSecurityGrantedAccess. |
| 6f80 | 5f 5f 69 6d 70 5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 47 72 61 6e 74 65 64 41 63 63 65 73 | __imp_RtlNewSecurityGrantedAcces |
| 6fa0 | 73 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 74 6c | s.RtlNewSecurityObject.__imp_Rtl |
| 6fc0 | 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 | NewSecurityObject.RtlNewSecurity |
| 6fe0 | 4f 62 6a 65 63 74 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a | ObjectEx.__imp_RtlNewSecurityObj |
| 7000 | 65 63 74 45 78 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 57 69 74 68 4d 75 | ectEx.RtlNewSecurityObjectWithMu |
| 7020 | 6c 74 69 70 6c 65 49 6e 68 65 72 69 74 61 6e 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 4e 65 77 53 65 | ltipleInheritance.__imp_RtlNewSe |
| 7040 | 63 75 72 69 74 79 4f 62 6a 65 63 74 57 69 74 68 4d 75 6c 74 69 70 6c 65 49 6e 68 65 72 69 74 61 | curityObjectWithMultipleInherita |
| 7060 | 6e 63 65 00 52 74 6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 5f 5f | nce.RtlNormalizeProcessParams.__ |
| 7080 | 69 6d 70 5f 52 74 6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 52 74 | imp_RtlNormalizeProcessParams.Rt |
| 70a0 | 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 72 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 4e 74 53 | lNtStatusToDosError.__imp_RtlNtS |
| 70c0 | 74 61 74 75 73 54 6f 44 6f 73 45 72 72 6f 72 00 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 | tatusToDosError.RtlNtStatusToDos |
| 70e0 | 45 72 72 6f 72 4e 6f 54 65 62 00 5f 5f 69 6d 70 5f 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f | ErrorNoTeb.__imp_RtlNtStatusToDo |
| 7100 | 73 45 72 72 6f 72 4e 6f 54 65 62 00 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54 61 62 6c | sErrorNoTeb.RtlNumberGenericTabl |
| 7120 | 65 45 6c 65 6d 65 6e 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 | eElements.__imp_RtlNumberGeneric |
| 7140 | 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 00 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54 61 | TableElements.RtlNumberGenericTa |
| 7160 | 62 6c 65 45 6c 65 6d 65 6e 74 73 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 4e 75 6d 62 65 72 47 65 | bleElementsAvl.__imp_RtlNumberGe |
| 7180 | 6e 65 72 69 63 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 41 76 6c 00 52 74 6c 4e 75 6d 62 65 72 4f | nericTableElementsAvl.RtlNumberO |
| 71a0 | 66 43 6c 65 61 72 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 4e 75 6d 62 65 72 4f 66 43 6c 65 61 | fClearBits.__imp_RtlNumberOfClea |
| 71c0 | 72 42 69 74 73 00 52 74 6c 4e 75 6d 62 65 72 4f 66 53 65 74 42 69 74 73 00 5f 5f 69 6d 70 5f 52 | rBits.RtlNumberOfSetBits.__imp_R |
| 71e0 | 74 6c 4e 75 6d 62 65 72 4f 66 53 65 74 42 69 74 73 00 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f | tlNumberOfSetBits.RtlOemStringTo |
| 7200 | 55 6e 69 63 6f 64 65 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f | UnicodeSize.__imp_RtlOemStringTo |
| 7220 | 55 6e 69 63 6f 64 65 53 69 7a 65 00 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 | UnicodeSize.RtlOemStringToUnicod |
| 7240 | 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 | eString.__imp_RtlOemStringToUnic |
| 7260 | 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 4f 65 6d 54 6f 55 6e 69 63 6f 64 65 4e 00 5f 5f 69 6d 70 | odeString.RtlOemToUnicodeN.__imp |
| 7280 | 5f 52 74 6c 4f 65 6d 54 6f 55 6e 69 63 6f 64 65 4e 00 52 74 6c 4f 70 65 6e 43 75 72 72 65 6e 74 | _RtlOemToUnicodeN.RtlOpenCurrent |
| 72a0 | 55 73 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 4f 70 65 6e 43 75 72 72 65 6e 74 55 73 65 72 00 52 74 | User.__imp_RtlOpenCurrentUser.Rt |
| 72c0 | 6c 50 63 54 6f 46 69 6c 65 48 65 61 64 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 50 63 54 6f 46 69 6c | lPcToFileHeader.__imp_RtlPcToFil |
| 72e0 | 65 48 65 61 64 65 72 00 52 74 6c 70 4e 74 43 72 65 61 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 | eHeader.RtlpNtCreateKey.__imp_Rt |
| 7300 | 6c 70 4e 74 43 72 65 61 74 65 4b 65 79 00 52 74 6c 70 4e 74 45 6e 75 6d 65 72 61 74 65 53 75 62 | lpNtCreateKey.RtlpNtEnumerateSub |
| 7320 | 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 70 4e 74 45 6e 75 6d 65 72 61 74 65 53 75 62 4b 65 79 00 | Key.__imp_RtlpNtEnumerateSubKey. |
| 7340 | 52 74 6c 70 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c | RtlpNtMakeTemporaryKey.__imp_Rtl |
| 7360 | 70 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4b 65 79 00 52 74 6c 70 4e 74 4f 70 65 6e 4b 65 | pNtMakeTemporaryKey.RtlpNtOpenKe |
| 7380 | 79 00 5f 5f 69 6d 70 5f 52 74 6c 70 4e 74 4f 70 65 6e 4b 65 79 00 52 74 6c 70 4e 74 51 75 65 72 | y.__imp_RtlpNtOpenKey.RtlpNtQuer |
| 73a0 | 79 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 70 4e 74 51 75 65 72 79 56 61 6c 75 65 | yValueKey.__imp_RtlpNtQueryValue |
| 73c0 | 4b 65 79 00 52 74 6c 70 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 70 | Key.RtlpNtSetValueKey.__imp_Rtlp |
| 73e0 | 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 52 74 6c 50 69 6e 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 | NtSetValueKey.RtlPinAtomInAtomTa |
| 7400 | 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 50 69 6e 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 | ble.__imp_RtlPinAtomInAtomTable. |
| 7420 | 52 74 6c 50 6f 70 46 72 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 50 6f 70 46 72 61 6d 65 00 52 74 | RtlPopFrame.__imp_RtlPopFrame.Rt |
| 7440 | 6c 50 72 65 66 69 78 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 50 72 65 66 69 78 53 74 72 | lPrefixString.__imp_RtlPrefixStr |
| 7460 | 69 6e 67 00 52 74 6c 50 72 65 66 69 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 | ing.RtlPrefixUnicodeString.__imp |
| 7480 | 5f 52 74 6c 50 72 65 66 69 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 50 75 73 68 46 | _RtlPrefixUnicodeString.RtlPushF |
| 74a0 | 72 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 50 75 73 68 46 72 61 6d 65 00 52 74 6c 51 75 65 75 65 | rame.__imp_RtlPushFrame.RtlQueue |
| 74c0 | 41 70 63 57 6f 77 36 34 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 75 65 41 70 63 | ApcWow64Thread.__imp_RtlQueueApc |
| 74e0 | 57 6f 77 36 34 54 68 72 65 61 64 00 52 74 6c 51 75 65 72 79 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 | Wow64Thread.RtlQueryAtomInAtomTa |
| 7500 | 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c | ble.__imp_RtlQueryAtomInAtomTabl |
| 7520 | 65 00 52 74 6c 51 75 65 72 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 5f 55 00 | e.RtlQueryEnvironmentVariable_U. |
| 7540 | 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c | __imp_RtlQueryEnvironmentVariabl |
| 7560 | 65 5f 55 00 52 74 6c 51 75 65 72 79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d | e_U.RtlQueryHeapInformation.__im |
| 7580 | 70 5f 52 74 6c 51 75 65 72 79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 51 75 65 | p_RtlQueryHeapInformation.RtlQue |
| 75a0 | 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 49 | ryInformationAcl.__imp_RtlQueryI |
| 75c0 | 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 00 52 74 6c 51 75 65 72 79 52 65 67 69 73 74 72 79 56 61 | nformationAcl.RtlQueryRegistryVa |
| 75e0 | 6c 75 65 73 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 52 65 67 69 73 74 72 79 56 61 6c 75 65 | lues.__imp_RtlQueryRegistryValue |
| 7600 | 73 00 52 74 6c 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 | s.RtlQuerySecurityObject.__imp_R |
| 7620 | 74 6c 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 51 75 65 72 79 54 69 | tlQuerySecurityObject.RtlQueryTi |
| 7640 | 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 | meZoneInformation.__imp_RtlQuery |
| 7660 | 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 52 61 69 73 65 45 78 63 65 | TimeZoneInformation.RtlRaiseExce |
| 7680 | 70 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 52 74 | ption.__imp_RtlRaiseException.Rt |
| 76a0 | 6c 52 61 69 73 65 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 52 61 69 73 65 53 74 61 74 75 | lRaiseStatus.__imp_RtlRaiseStatu |
| 76c0 | 73 00 52 74 6c 52 61 6e 64 6f 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 61 6e 64 6f 6d 00 52 74 6c 52 | s.RtlRandom.__imp_RtlRandom.RtlR |
| 76e0 | 61 6e 64 6f 6d 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 52 61 6e 64 6f 6d 45 78 00 52 74 6c 52 65 41 | andomEx.__imp_RtlRandomEx.RtlReA |
| 7700 | 6c 6c 6f 63 61 74 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 41 6c 6c 6f 63 61 74 65 48 | llocateHeap.__imp_RtlReAllocateH |
| 7720 | 65 61 70 00 52 74 6c 52 65 61 6c 50 72 65 64 65 63 65 73 73 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c | eap.RtlRealPredecessor.__imp_Rtl |
| 7740 | 52 65 61 6c 50 72 65 64 65 63 65 73 73 6f 72 00 52 74 6c 52 65 61 6c 53 75 63 63 65 73 73 6f 72 | RealPredecessor.RtlRealSuccessor |
| 7760 | 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 61 6c 53 75 63 63 65 73 73 6f 72 00 52 74 6c 52 65 6c 65 61 | .__imp_RtlRealSuccessor.RtlRelea |
| 7780 | 73 65 50 65 62 4c 6f 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 61 73 65 50 65 62 4c 6f 63 | sePebLock.__imp_RtlReleasePebLoc |
| 77a0 | 6b 00 52 74 6c 52 65 6c 65 61 73 65 50 72 69 76 69 6c 65 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 52 | k.RtlReleasePrivilege.__imp_RtlR |
| 77c0 | 65 6c 65 61 73 65 50 72 69 76 69 6c 65 67 65 00 52 74 6c 52 65 6c 65 61 73 65 52 65 6c 61 74 69 | eleasePrivilege.RtlReleaseRelati |
| 77e0 | 76 65 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 61 73 65 52 65 6c 61 74 69 76 65 4e | veName.__imp_RtlReleaseRelativeN |
| 7800 | 61 6d 65 00 52 74 6c 52 65 6c 65 61 73 65 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 52 74 6c | ame.RtlReleaseResource.__imp_Rtl |
| 7820 | 52 65 6c 65 61 73 65 52 65 73 6f 75 72 63 65 00 52 74 6c 52 65 6d 6f 74 65 43 61 6c 6c 00 5f 5f | ReleaseResource.RtlRemoteCall.__ |
| 7840 | 69 6d 70 5f 52 74 6c 52 65 6d 6f 74 65 43 61 6c 6c 00 52 74 6c 52 65 73 74 6f 72 65 4c 61 73 74 | imp_RtlRemoteCall.RtlRestoreLast |
| 7860 | 57 69 6e 33 32 45 72 72 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 73 74 6f 72 65 4c 61 73 74 57 | Win32Error.__imp_RtlRestoreLastW |
| 7880 | 69 6e 33 32 45 72 72 6f 72 00 52 74 6c 52 75 6e 44 65 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 | in32Error.RtlRunDecodeUnicodeStr |
| 78a0 | 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 52 75 6e 44 65 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 | ing.__imp_RtlRunDecodeUnicodeStr |
| 78c0 | 69 6e 67 00 52 74 6c 52 75 6e 45 6e 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f | ing.RtlRunEncodeUnicodeString.__ |
| 78e0 | 69 6d 70 5f 52 74 6c 52 75 6e 45 6e 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 | imp_RtlRunEncodeUnicodeString.Rt |
| 7900 | 6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 54 6f 54 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 | lSecondsSince1970ToTime.__imp_Rt |
| 7920 | 6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 54 6f 54 69 6d 65 00 52 74 6c 53 65 63 6f 6e | lSecondsSince1970ToTime.RtlSecon |
| 7940 | 64 73 53 69 6e 63 65 31 39 38 30 54 6f 54 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 63 6f 6e | dsSince1980ToTime.__imp_RtlSecon |
| 7960 | 64 73 53 69 6e 63 65 31 39 38 30 54 6f 54 69 6d 65 00 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 | dsSince1980ToTime.RtlSelfRelativ |
| 7980 | 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 6c 66 52 65 6c 61 74 | eToAbsoluteSD.__imp_RtlSelfRelat |
| 79a0 | 69 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 00 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 | iveToAbsoluteSD.RtlSelfRelativeT |
| 79c0 | 6f 41 62 73 6f 6c 75 74 65 53 44 32 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 | oAbsoluteSD2.__imp_RtlSelfRelati |
| 79e0 | 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 32 00 52 74 6c 53 65 74 41 6c 6c 42 69 74 73 00 5f 5f | veToAbsoluteSD2.RtlSetAllBits.__ |
| 7a00 | 69 6d 70 5f 52 74 6c 53 65 74 41 6c 6c 42 69 74 73 00 52 74 6c 53 65 74 42 69 74 73 00 5f 5f 69 | imp_RtlSetAllBits.RtlSetBits.__i |
| 7a20 | 6d 70 5f 52 74 6c 53 65 74 42 69 74 73 00 52 74 6c 53 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 | mp_RtlSetBits.RtlSetCurrentDirec |
| 7a40 | 74 6f 72 79 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 | tory_U.__imp_RtlSetCurrentDirect |
| 7a60 | 6f 72 79 5f 55 00 52 74 6c 53 65 74 43 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 5f | ory_U.RtlSetCurrentEnvironment._ |
| 7a80 | 5f 69 6d 70 5f 52 74 6c 53 65 74 43 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 52 74 | _imp_RtlSetCurrentEnvironment.Rt |
| 7aa0 | 6c 53 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 | lSetDaclSecurityDescriptor.__imp |
| 7ac0 | 5f 52 74 6c 53 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 | _RtlSetDaclSecurityDescriptor.Rt |
| 7ae0 | 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 | lSetEnvironmentVariable.__imp_Rt |
| 7b00 | 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 00 52 74 6c 53 65 74 47 72 | lSetEnvironmentVariable.RtlSetGr |
| 7b20 | 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 | oupSecurityDescriptor.__imp_RtlS |
| 7b40 | 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 | etGroupSecurityDescriptor.RtlSet |
| 7b60 | 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 48 65 61 70 | HeapInformation.__imp_RtlSetHeap |
| 7b80 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 | Information.RtlSetLastWin32Error |
| 7ba0 | 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 52 74 6c 53 | .__imp_RtlSetLastWin32Error.RtlS |
| 7bc0 | 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 41 6e 64 4e 74 53 74 61 74 75 73 46 72 6f 6d 4e | etLastWin32ErrorAndNtStatusFromN |
| 7be0 | 74 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 | tStatus.__imp_RtlSetLastWin32Err |
| 7c00 | 6f 72 41 6e 64 4e 74 53 74 61 74 75 73 46 72 6f 6d 4e 74 53 74 61 74 75 73 00 52 74 6c 53 65 74 | orAndNtStatusFromNtStatus.RtlSet |
| 7c20 | 55 73 65 72 56 61 6c 75 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 55 73 65 72 56 61 | UserValueHeap.__imp_RtlSetUserVa |
| 7c40 | 6c 75 65 48 65 61 70 00 52 74 6c 53 65 74 55 73 65 72 46 6c 61 67 73 48 65 61 70 00 5f 5f 69 6d | lueHeap.RtlSetUserFlagsHeap.__im |
| 7c60 | 70 5f 52 74 6c 53 65 74 55 73 65 72 46 6c 61 67 73 48 65 61 70 00 52 74 6c 53 65 74 49 6e 66 6f | p_RtlSetUserFlagsHeap.RtlSetInfo |
| 7c80 | 72 6d 61 74 69 6f 6e 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 49 6e 66 6f 72 6d 61 74 69 | rmationAcl.__imp_RtlSetInformati |
| 7ca0 | 6f 6e 41 63 6c 00 52 74 6c 53 65 74 4f 77 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 | onAcl.RtlSetOwnerSecurityDescrip |
| 7cc0 | 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 4f 77 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 | tor.__imp_RtlSetOwnerSecurityDes |
| 7ce0 | 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 50 72 6f 63 65 73 73 49 73 43 72 69 74 69 63 61 6c 00 | criptor.RtlSetProcessIsCritical. |
| 7d00 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 50 72 6f 63 65 73 73 49 73 43 72 69 74 69 63 61 6c 00 52 74 | __imp_RtlSetProcessIsCritical.Rt |
| 7d20 | 6c 53 65 74 53 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 | lSetSaclSecurityDescriptor.__imp |
| 7d40 | 5f 52 74 6c 53 65 74 53 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 | _RtlSetSaclSecurityDescriptor.Rt |
| 7d60 | 6c 53 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 | lSetSecurityDescriptorRMControl. |
| 7d80 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 52 4d | __imp_RtlSetSecurityDescriptorRM |
| 7da0 | 43 6f 6e 74 72 6f 6c 00 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 | Control.RtlSetSecurityObject.__i |
| 7dc0 | 6d 70 5f 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 53 65 74 53 65 | mp_RtlSetSecurityObject.RtlSetSe |
| 7de0 | 63 75 72 69 74 79 4f 62 6a 65 63 74 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 53 65 63 75 72 | curityObjectEx.__imp_RtlSetSecur |
| 7e00 | 69 74 79 4f 62 6a 65 63 74 45 78 00 52 74 6c 53 65 74 54 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 | ityObjectEx.RtlSetThreadErrorMod |
| 7e20 | 65 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 00 52 74 | e.__imp_RtlSetThreadErrorMode.Rt |
| 7e40 | 6c 53 65 74 54 68 72 65 61 64 49 73 43 72 69 74 69 63 61 6c 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 | lSetThreadIsCritical.__imp_RtlSe |
| 7e60 | 74 54 68 72 65 61 64 49 73 43 72 69 74 69 63 61 6c 00 52 74 6c 53 65 74 54 69 6d 65 5a 6f 6e 65 | tThreadIsCritical.RtlSetTimeZone |
| 7e80 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 69 6d 65 5a 6f 6e 65 | Information.__imp_RtlSetTimeZone |
| 7ea0 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 53 69 7a 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 | Information.RtlSizeHeap.__imp_Rt |
| 7ec0 | 6c 53 69 7a 65 48 65 61 70 00 52 74 6c 53 70 6c 61 79 00 5f 5f 69 6d 70 5f 52 74 6c 53 70 6c 61 | lSizeHeap.RtlSplay.__imp_RtlSpla |
| 7ee0 | 79 00 52 74 6c 53 74 61 72 74 52 58 61 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 53 74 61 72 74 52 58 | y.RtlStartRXact.__imp_RtlStartRX |
| 7f00 | 61 63 74 00 52 74 6c 53 74 72 69 6e 67 46 72 6f 6d 47 55 49 44 00 5f 5f 69 6d 70 5f 52 74 6c 53 | act.RtlStringFromGUID.__imp_RtlS |
| 7f20 | 74 72 69 6e 67 46 72 6f 6d 47 55 49 44 00 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79 43 6f 75 | tringFromGUID.RtlSubAuthorityCou |
| 7f40 | 6e 74 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79 43 6f 75 6e 74 | ntSid.__imp_RtlSubAuthorityCount |
| 7f60 | 53 69 64 00 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c | Sid.RtlSubAuthoritySid.__imp_Rtl |
| 7f80 | 53 75 62 41 75 74 68 6f 72 69 74 79 53 69 64 00 52 74 6c 53 75 62 74 72 65 65 50 72 65 64 65 63 | SubAuthoritySid.RtlSubtreePredec |
| 7fa0 | 65 73 73 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 75 62 74 72 65 65 50 72 65 64 65 63 65 73 73 6f | essor.__imp_RtlSubtreePredecesso |
| 7fc0 | 72 00 52 74 6c 53 75 62 74 72 65 65 53 75 63 63 65 73 73 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 | r.RtlSubtreeSuccessor.__imp_RtlS |
| 7fe0 | 75 62 74 72 65 65 53 75 63 63 65 73 73 6f 72 00 52 74 6c 54 69 6d 65 54 6f 45 6c 61 70 73 65 64 | ubtreeSuccessor.RtlTimeToElapsed |
| 8000 | 54 69 6d 65 46 69 65 6c 64 73 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 6d 65 54 6f 45 6c 61 70 73 65 | TimeFields.__imp_RtlTimeToElapse |
| 8020 | 64 54 69 6d 65 46 69 65 6c 64 73 00 52 74 6c 54 69 6d 65 46 69 65 6c 64 73 54 6f 54 69 6d 65 00 | dTimeFields.RtlTimeFieldsToTime. |
| 8040 | 5f 5f 69 6d 70 5f 52 74 6c 54 69 6d 65 46 69 65 6c 64 73 54 6f 54 69 6d 65 00 52 74 6c 54 69 6d | __imp_RtlTimeFieldsToTime.RtlTim |
| 8060 | 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 6d | eToSecondsSince1970.__imp_RtlTim |
| 8080 | 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 00 52 74 6c 54 69 6d 65 54 6f 53 65 63 | eToSecondsSince1970.RtlTimeToSec |
| 80a0 | 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 6d 65 54 6f 53 65 63 | ondsSince1980.__imp_RtlTimeToSec |
| 80c0 | 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 00 52 74 6c 54 69 6d 65 54 6f 54 69 6d 65 46 69 65 6c 64 | ondsSince1980.RtlTimeToTimeField |
| 80e0 | 73 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 6d 65 54 6f 54 69 6d 65 46 69 65 6c 64 73 00 52 74 6c 54 | s.__imp_RtlTimeToTimeFields.RtlT |
| 8100 | 72 61 63 65 44 61 74 61 62 61 73 65 43 72 65 61 74 65 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 | raceDatabaseCreate.__imp_RtlTrac |
| 8120 | 65 44 61 74 61 62 61 73 65 43 72 65 61 74 65 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 | eDatabaseCreate.RtlTraceDatabase |
| 8140 | 44 65 73 74 72 6f 79 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 44 65 | Destroy.__imp_RtlTraceDatabaseDe |
| 8160 | 73 74 72 6f 79 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 56 61 6c 69 64 61 74 65 00 5f | stroy.RtlTraceDatabaseValidate._ |
| 8180 | 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 56 61 6c 69 64 61 74 65 00 52 74 | _imp_RtlTraceDatabaseValidate.Rt |
| 81a0 | 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 41 64 64 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 | lTraceDatabaseAdd.__imp_RtlTrace |
| 81c0 | 44 61 74 61 62 61 73 65 41 64 64 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 46 69 6e 64 | DatabaseAdd.RtlTraceDatabaseFind |
| 81e0 | 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 46 69 6e 64 00 52 74 6c 54 | .__imp_RtlTraceDatabaseFind.RtlT |
| 8200 | 72 61 63 65 44 61 74 61 62 61 73 65 45 6e 75 6d 65 72 61 74 65 00 5f 5f 69 6d 70 5f 52 74 6c 54 | raceDatabaseEnumerate.__imp_RtlT |
| 8220 | 72 61 63 65 44 61 74 61 62 61 73 65 45 6e 75 6d 65 72 61 74 65 00 52 74 6c 54 72 61 63 65 44 61 | raceDatabaseEnumerate.RtlTraceDa |
| 8240 | 74 61 62 61 73 65 4c 6f 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 | tabaseLock.__imp_RtlTraceDatabas |
| 8260 | 65 4c 6f 63 6b 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63 6b 00 5f 5f 69 | eLock.RtlTraceDatabaseUnlock.__i |
| 8280 | 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63 6b 00 52 74 6c 54 72 79 | mp_RtlTraceDatabaseUnlock.RtlTry |
| 82a0 | 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 | EnterCriticalSection.__imp_RtlTr |
| 82c0 | 79 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 55 6e 68 61 6e 64 6c | yEnterCriticalSection.RtlUnhandl |
| 82e0 | 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 68 61 6e | edExceptionFilter.__imp_RtlUnhan |
| 8300 | 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 52 74 6c 55 6e 68 61 6e 64 6c 65 64 | dledExceptionFilter.RtlUnhandled |
| 8320 | 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 32 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 68 61 6e 64 | ExceptionFilter2.__imp_RtlUnhand |
| 8340 | 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 32 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 | ledExceptionFilter2.RtlUnicodeSt |
| 8360 | 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 | ringToAnsiSize.__imp_RtlUnicodeS |
| 8380 | 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | tringToAnsiSize.RtlUnicodeString |
| 83a0 | 54 6f 41 6e 73 69 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 | ToAnsiString.__imp_RtlUnicodeStr |
| 83c0 | 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | ingToAnsiString.RtlUnicodeString |
| 83e0 | 54 6f 49 6e 74 65 67 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | ToInteger.__imp_RtlUnicodeString |
| 8400 | 54 6f 49 6e 74 65 67 65 72 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 | ToInteger.RtlUnicodeStringToOemS |
| 8420 | 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 | ize.__imp_RtlUnicodeStringToOemS |
| 8440 | 69 7a 65 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 00 | ize.RtlUnicodeStringToOemString. |
| 8460 | 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e | __imp_RtlUnicodeStringToOemStrin |
| 8480 | 67 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 | g.RtlUnicodeStringToCountedOemSt |
| 84a0 | 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43 6f 75 | ring.__imp_RtlUnicodeStringToCou |
| 84c0 | 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 | ntedOemString.RtlUnicodeToMultiB |
| 84e0 | 79 74 65 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 | yteN.__imp_RtlUnicodeToMultiByte |
| 8500 | 4e 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 | N.RtlUnicodeToOemN.__imp_RtlUnic |
| 8520 | 6f 64 65 54 6f 4f 65 6d 4e 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 53 | odeToOemN.RtlUnicodeToMultiByteS |
| 8540 | 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 53 | ize.__imp_RtlUnicodeToMultiByteS |
| 8560 | 69 7a 65 00 52 74 6c 55 6e 69 66 6f 72 6d 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 66 6f 72 6d 00 | ize.RtlUniform.__imp_RtlUniform. |
| 8580 | 52 74 6c 55 6e 6c 6f 63 6b 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 6c 6f 63 6b 48 65 61 | RtlUnlockHeap.__imp_RtlUnlockHea |
| 85a0 | 70 00 52 74 6c 55 6e 77 69 6e 64 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 77 69 6e 64 00 52 74 6c 55 | p.RtlUnwind.__imp_RtlUnwind.RtlU |
| 85c0 | 70 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 | pcaseUnicodeChar.__imp_RtlUpcase |
| 85e0 | 55 6e 69 63 6f 64 65 43 68 61 72 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 | UnicodeChar.RtlUpcaseUnicodeStri |
| 8600 | 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 | ng.__imp_RtlUpcaseUnicodeString. |
| 8620 | 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 | RtlUpcaseUnicodeStringToAnsiStri |
| 8640 | 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 | ng.__imp_RtlUpcaseUnicodeStringT |
| 8660 | 6f 41 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 | oAnsiString.RtlUpcaseUnicodeStri |
| 8680 | 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 | ngToOemString.__imp_RtlUpcaseUni |
| 86a0 | 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 00 52 74 6c 55 70 63 61 73 65 55 | codeStringToOemString.RtlUpcaseU |
| 86c0 | 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 5f | nicodeStringToCountedOemString._ |
| 86e0 | 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43 6f 75 | _imp_RtlUpcaseUnicodeStringToCou |
| 8700 | 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f | ntedOemString.RtlUpcaseUnicodeTo |
| 8720 | 4d 75 6c 74 69 42 79 74 65 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 | MultiByteN.__imp_RtlUpcaseUnicod |
| 8740 | 65 54 6f 4d 75 6c 74 69 42 79 74 65 4e 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f | eToMultiByteN.RtlUpcaseUnicodeTo |
| 8760 | 4f 65 6d 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4f 65 6d | OemN.__imp_RtlUpcaseUnicodeToOem |
| 8780 | 4e 00 52 74 6c 55 70 70 65 72 43 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 70 65 72 43 68 61 | N.RtlUpperChar.__imp_RtlUpperCha |
| 87a0 | 72 00 52 74 6c 55 70 70 65 72 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 70 65 72 53 | r.RtlUpperString.__imp_RtlUpperS |
| 87c0 | 74 72 69 6e 67 00 52 74 6c 56 61 6c 69 64 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 | tring.RtlValidAcl.__imp_RtlValid |
| 87e0 | 41 63 6c 00 52 74 6c 56 61 6c 69 64 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 | Acl.RtlValidateUnicodeString.__i |
| 8800 | 6d 70 5f 52 74 6c 56 61 6c 69 64 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 56 | mp_RtlValidateUnicodeString.RtlV |
| 8820 | 61 6c 69 64 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c | alidSecurityDescriptor.__imp_Rtl |
| 8840 | 56 61 6c 69 64 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 56 61 6c 69 64 | ValidSecurityDescriptor.RtlValid |
| 8860 | 52 65 6c 61 74 69 76 65 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 | RelativeSecurityDescriptor.__imp |
| 8880 | 5f 52 74 6c 56 61 6c 69 64 52 65 6c 61 74 69 76 65 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 | _RtlValidRelativeSecurityDescrip |
| 88a0 | 74 6f 72 00 52 74 6c 56 61 6c 69 64 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 53 69 | tor.RtlValidSid.__imp_RtlValidSi |
| 88c0 | 64 00 52 74 6c 56 65 72 69 66 79 56 65 72 73 69 6f 6e 49 6e 66 6f 00 5f 5f 69 6d 70 5f 52 74 6c | d.RtlVerifyVersionInfo.__imp_Rtl |
| 88e0 | 56 65 72 69 66 79 56 65 72 73 69 6f 6e 49 6e 66 6f 00 52 74 6c 57 61 6c 6b 46 72 61 6d 65 43 68 | VerifyVersionInfo.RtlWalkFrameCh |
| 8900 | 61 69 6e 00 5f 5f 69 6d 70 5f 52 74 6c 57 61 6c 6b 46 72 61 6d 65 43 68 61 69 6e 00 52 74 6c 57 | ain.__imp_RtlWalkFrameChain.RtlW |
| 8920 | 61 6c 6b 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 57 61 6c 6b 48 65 61 70 00 52 74 6c 57 6f 77 | alkHeap.__imp_RtlWalkHeap.RtlWow |
| 8940 | 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 57 | 64EnableFsRedirection.__imp_RtlW |
| 8960 | 6f 77 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f 6e 00 52 74 6c 57 6f 77 36 34 | ow64EnableFsRedirection.RtlWow64 |
| 8980 | 45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f 6e 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 57 | EnableFsRedirectionEx.__imp_RtlW |
| 89a0 | 6f 77 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f 6e 45 78 00 52 74 6c 57 72 69 | ow64EnableFsRedirectionEx.RtlWri |
| 89c0 | 74 65 52 65 67 69 73 74 72 79 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 52 74 6c 57 72 69 74 65 52 65 | teRegistryValue.__imp_RtlWriteRe |
| 89e0 | 67 69 73 74 72 79 56 61 6c 75 65 00 52 74 6c 78 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 | gistryValue.RtlxAnsiStringToUnic |
| 8a00 | 6f 64 65 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 78 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e | odeSize.__imp_RtlxAnsiStringToUn |
| 8a20 | 69 63 6f 64 65 53 69 7a 65 00 52 74 6c 78 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 | icodeSize.RtlxOemStringToUnicode |
| 8a40 | 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 78 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 | Size.__imp_RtlxOemStringToUnicod |
| 8a60 | 65 53 69 7a 65 00 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a | eSize.RtlxUnicodeStringToAnsiSiz |
| 8a80 | 65 00 5f 5f 69 6d 70 5f 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 | e.__imp_RtlxUnicodeStringToAnsiS |
| 8aa0 | 69 7a 65 00 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 69 7a 65 00 5f | ize.RtlxUnicodeStringToOemSize._ |
| 8ac0 | 5f 69 6d 70 5f 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 69 7a 65 00 | _imp_RtlxUnicodeStringToOemSize. |
| 8ae0 | 52 74 6c 5a 65 72 6f 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 5a 65 72 6f 48 65 61 70 00 52 74 | RtlZeroHeap.__imp_RtlZeroHeap.Rt |
| 8b00 | 6c 5a 65 72 6f 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 5a 65 72 6f 4d 65 6d 6f 72 79 00 | lZeroMemory.__imp_RtlZeroMemory. |
| 8b20 | 52 74 6c 53 79 73 74 65 6d 54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69 6d 65 00 5f 5f 69 6d 70 5f 52 | RtlSystemTimeToLocalTime.__imp_R |
| 8b40 | 74 6c 53 79 73 74 65 6d 54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69 6d 65 00 52 74 6c 4c 6f 63 61 6c | tlSystemTimeToLocalTime.RtlLocal |
| 8b60 | 54 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 63 61 6c 54 | TimeToSystemTime.__imp_RtlLocalT |
| 8b80 | 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 43 73 72 43 6c 69 65 6e 74 43 6f 6e 6e 65 63 74 | imeToSystemTime.CsrClientConnect |
| 8ba0 | 54 6f 53 65 72 76 65 72 00 5f 5f 69 6d 70 5f 43 73 72 43 6c 69 65 6e 74 43 6f 6e 6e 65 63 74 54 | ToServer.__imp_CsrClientConnectT |
| 8bc0 | 6f 53 65 72 76 65 72 00 43 73 72 43 6c 69 65 6e 74 43 61 6c 6c 53 65 72 76 65 72 00 5f 5f 69 6d | oServer.CsrClientCallServer.__im |
| 8be0 | 70 5f 43 73 72 43 6c 69 65 6e 74 43 61 6c 6c 53 65 72 76 65 72 00 43 73 72 41 6c 6c 6f 63 61 74 | p_CsrClientCallServer.CsrAllocat |
| 8c00 | 65 43 61 70 74 75 72 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 43 73 72 41 6c 6c 6f 63 61 74 65 | eCaptureBuffer.__imp_CsrAllocate |
| 8c20 | 43 61 70 74 75 72 65 42 75 66 66 65 72 00 43 73 72 46 72 65 65 43 61 70 74 75 72 65 42 75 66 66 | CaptureBuffer.CsrFreeCaptureBuff |
| 8c40 | 65 72 00 5f 5f 69 6d 70 5f 43 73 72 46 72 65 65 43 61 70 74 75 72 65 42 75 66 66 65 72 00 43 73 | er.__imp_CsrFreeCaptureBuffer.Cs |
| 8c60 | 72 41 6c 6c 6f 63 61 74 65 4d 65 73 73 61 67 65 50 6f 69 6e 74 65 72 00 5f 5f 69 6d 70 5f 43 73 | rAllocateMessagePointer.__imp_Cs |
| 8c80 | 72 41 6c 6c 6f 63 61 74 65 4d 65 73 73 61 67 65 50 6f 69 6e 74 65 72 00 43 73 72 43 61 70 74 75 | rAllocateMessagePointer.CsrCaptu |
| 8ca0 | 72 65 4d 65 73 73 61 67 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 43 73 72 43 61 70 74 75 72 65 | reMessageBuffer.__imp_CsrCapture |
| 8cc0 | 4d 65 73 73 61 67 65 42 75 66 66 65 72 00 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 53 | MessageBuffer.CsrCaptureMessageS |
| 8ce0 | 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 53 74 72 | tring.__imp_CsrCaptureMessageStr |
| 8d00 | 69 6e 67 00 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 4d 75 6c 74 69 55 6e 69 63 6f 64 | ing.CsrCaptureMessageMultiUnicod |
| 8d20 | 65 53 74 72 69 6e 67 73 49 6e 50 6c 61 63 65 00 5f 5f 69 6d 70 5f 43 73 72 43 61 70 74 75 72 65 | eStringsInPlace.__imp_CsrCapture |
| 8d40 | 4d 65 73 73 61 67 65 4d 75 6c 74 69 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 73 49 6e 50 6c 61 63 | MessageMultiUnicodeStringsInPlac |
| 8d60 | 65 00 43 73 72 43 61 70 74 75 72 65 54 69 6d 65 6f 75 74 00 5f 5f 69 6d 70 5f 43 73 72 43 61 70 | e.CsrCaptureTimeout.__imp_CsrCap |
| 8d80 | 74 75 72 65 54 69 6d 65 6f 75 74 00 43 73 72 50 72 6f 62 65 46 6f 72 57 72 69 74 65 00 5f 5f 69 | tureTimeout.CsrProbeForWrite.__i |
| 8da0 | 6d 70 5f 43 73 72 50 72 6f 62 65 46 6f 72 57 72 69 74 65 00 43 73 72 50 72 6f 62 65 46 6f 72 52 | mp_CsrProbeForWrite.CsrProbeForR |
| 8dc0 | 65 61 64 00 5f 5f 69 6d 70 5f 43 73 72 50 72 6f 62 65 46 6f 72 52 65 61 64 00 43 73 72 4e 65 77 | ead.__imp_CsrProbeForRead.CsrNew |
| 8de0 | 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 43 73 72 4e 65 77 54 68 72 65 61 64 00 43 73 72 49 64 65 | Thread.__imp_CsrNewThread.CsrIde |
| 8e00 | 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 43 73 72 49 64 | ntifyAlertableThread.__imp_CsrId |
| 8e20 | 65 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54 68 72 65 61 64 00 43 73 72 53 65 74 50 72 69 6f | entifyAlertableThread.CsrSetPrio |
| 8e40 | 72 69 74 79 43 6c 61 73 73 00 5f 5f 69 6d 70 5f 43 73 72 53 65 74 50 72 69 6f 72 69 74 79 43 6c | rityClass.__imp_CsrSetPriorityCl |
| 8e60 | 61 73 73 00 43 73 72 47 65 74 50 72 6f 63 65 73 73 49 64 00 5f 5f 69 6d 70 5f 43 73 72 47 65 74 | ass.CsrGetProcessId.__imp_CsrGet |
| 8e80 | 50 72 6f 63 65 73 73 49 64 00 52 74 6c 43 75 74 6f 76 65 72 54 69 6d 65 54 6f 53 79 73 74 65 6d | ProcessId.RtlCutoverTimeToSystem |
| 8ea0 | 54 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 75 74 6f 76 65 72 54 69 6d 65 54 6f 53 79 73 74 65 | Time.__imp_RtlCutoverTimeToSyste |
| 8ec0 | 6d 54 69 6d 65 00 52 74 6c 45 78 74 65 6e 64 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 45 78 74 | mTime.RtlExtendHeap.__imp_RtlExt |
| 8ee0 | 65 6e 64 48 65 61 70 00 52 74 6c 55 73 61 67 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 55 73 | endHeap.RtlUsageHeap.__imp_RtlUs |
| 8f00 | 61 67 65 48 65 61 70 00 52 74 6c 43 72 65 61 74 65 54 61 67 48 65 61 70 00 5f 5f 69 6d 70 5f 52 | ageHeap.RtlCreateTagHeap.__imp_R |
| 8f20 | 74 6c 43 72 65 61 74 65 54 61 67 48 65 61 70 00 52 74 6c 51 75 65 72 79 54 61 67 48 65 61 70 00 | tlCreateTagHeap.RtlQueryTagHeap. |
| 8f40 | 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 54 61 67 48 65 61 70 00 52 74 6c 47 65 74 50 72 6f 63 | __imp_RtlQueryTagHeap.RtlGetProc |
| 8f60 | 65 73 73 48 65 61 70 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 50 72 6f 63 65 73 73 48 65 61 70 | essHeaps.__imp_RtlGetProcessHeap |
| 8f80 | 73 00 52 74 6c 43 72 65 61 74 65 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 5f 5f 69 6d | s.RtlCreateQueryDebugBuffer.__im |
| 8fa0 | 70 5f 52 74 6c 43 72 65 61 74 65 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 52 74 6c 44 | p_RtlCreateQueryDebugBuffer.RtlD |
| 8fc0 | 65 73 74 72 6f 79 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 52 74 6c | estroyQueryDebugBuffer.__imp_Rtl |
| 8fe0 | 44 65 73 74 72 6f 79 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 52 74 6c 51 75 65 72 79 | DestroyQueryDebugBuffer.RtlQuery |
| 9000 | 50 72 6f 63 65 73 73 44 65 62 75 67 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 | ProcessDebugInformation.__imp_Rt |
| 9020 | 6c 51 75 65 72 79 50 72 6f 63 65 73 73 44 65 62 75 67 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 | lQueryProcessDebugInformation.Rt |
| 9040 | 6c 46 6c 75 73 68 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68 65 00 5f 5f 69 6d 70 5f 52 74 | lFlushSecureMemoryCache.__imp_Rt |
| 9060 | 6c 46 6c 75 73 68 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68 65 00 52 74 6c 52 65 67 69 73 | lFlushSecureMemoryCache.RtlRegis |
| 9080 | 74 65 72 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68 65 43 61 6c 6c 62 61 63 6b 00 5f 5f 69 | terSecureMemoryCacheCallback.__i |
| 90a0 | 6d 70 5f 52 74 6c 52 65 67 69 73 74 65 72 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68 65 43 | mp_RtlRegisterSecureMemoryCacheC |
| 90c0 | 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 61 74 61 6e 00 61 74 61 6e 00 5f 5f 69 6d 70 5f 74 61 | allback.__imp_atan.atan.__imp_ta |
| 90e0 | 6e 00 74 61 6e 00 5f 5f 69 6d 70 5f 73 69 6e 00 73 69 6e 00 5f 5f 69 6d 70 5f 63 6f 73 00 63 6f | n.tan.__imp_sin.sin.__imp_cos.co |
| 9100 | 73 00 5f 5f 69 6d 70 5f 63 65 69 6c 00 63 65 69 6c 00 5f 5f 69 6d 70 5f 66 6c 6f 6f 72 00 66 6c | s.__imp_ceil.ceil.__imp_floor.fl |
| 9120 | 6f 6f 72 00 5f 5f 69 6d 70 5f 6c 6f 67 00 6c 6f 67 00 5f 5f 69 6d 70 5f 70 6f 77 00 70 6f 77 00 | oor.__imp_log.log.__imp_pow.pow. |
| 9140 | 5f 5f 69 6d 70 5f 73 71 72 74 00 73 71 72 74 00 5f 5f 69 6d 70 5f 61 62 73 00 61 62 73 00 5f 5f | __imp_sqrt.sqrt.__imp_abs.abs.__ |
| 9160 | 69 6d 70 5f 66 61 62 73 00 66 61 62 73 00 5f 5f 69 6d 70 5f 6c 61 62 73 00 6c 61 62 73 00 52 74 | imp_fabs.fabs.__imp_labs.labs.Rt |
| 9180 | 6c 70 4e 6f 74 4f 77 6e 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f | lpNotOwnerCriticalSection.__imp_ |
| 91a0 | 52 74 6c 70 4e 6f 74 4f 77 6e 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 70 | RtlpNotOwnerCriticalSection.Rtlp |
| 91c0 | 57 61 69 74 46 6f 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c | WaitForCriticalSection.__imp_Rtl |
| 91e0 | 70 57 61 69 74 46 6f 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 70 55 6e 57 61 | pWaitForCriticalSection.RtlpUnWa |
| 9200 | 69 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 70 55 6e 57 61 | itCriticalSection.__imp_RtlpUnWa |
| 9220 | 69 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 49 73 54 65 78 74 55 6e 69 63 6f | itCriticalSection.RtlIsTextUnico |
| 9240 | 64 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 54 65 78 74 55 6e 69 63 6f 64 65 00 52 74 6c 47 65 74 | de.__imp_RtlIsTextUnicode.RtlGet |
| 9260 | 43 61 6c 6c 65 72 73 41 64 64 72 65 73 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 61 6c 6c 65 | CallersAddress.__imp_RtlGetCalle |
| 9280 | 72 73 41 64 64 72 65 73 73 00 52 74 6c 4c 6f 67 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 5f | rsAddress.RtlLogStackBackTrace._ |
| 92a0 | 5f 69 6d 70 5f 52 74 6c 4c 6f 67 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 52 74 6c 43 61 70 | _imp_RtlLogStackBackTrace.RtlCap |
| 92c0 | 74 75 72 65 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 61 70 74 75 72 65 43 6f 6e 74 | tureContext.__imp_RtlCaptureCont |
| 92e0 | 65 78 74 00 52 74 6c 43 61 70 74 75 72 65 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 5f 5f 69 | ext.RtlCaptureStackBackTrace.__i |
| 9300 | 6d 70 5f 52 74 6c 43 61 70 74 75 72 65 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 52 74 6c 56 | mp_RtlCaptureStackBackTrace.RtlV |
| 9320 | 61 6c 69 64 61 74 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 61 74 65 48 65 61 | alidateHeap.__imp_RtlValidateHea |
| 9340 | 70 00 52 74 6c 56 61 6c 69 64 61 74 65 50 72 6f 63 65 73 73 48 65 61 70 73 00 5f 5f 69 6d 70 5f | p.RtlValidateProcessHeaps.__imp_ |
| 9360 | 52 74 6c 56 61 6c 69 64 61 74 65 50 72 6f 63 65 73 73 48 65 61 70 73 00 52 74 6c 51 75 65 72 79 | RtlValidateProcessHeaps.RtlQuery |
| 9380 | 50 72 6f 63 65 73 73 4c 6f 63 6b 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c | ProcessLockInformation.__imp_Rtl |
| 93a0 | 51 75 65 72 79 50 72 6f 63 65 73 73 4c 6f 63 6b 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 51 | QueryProcessLockInformation.RtlQ |
| 93c0 | 75 65 72 79 50 72 6f 63 65 73 73 42 61 63 6b 54 72 61 63 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 | ueryProcessBackTraceInformation. |
| 93e0 | 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 42 61 63 6b 54 72 61 63 65 49 6e | __imp_RtlQueryProcessBackTraceIn |
| 9400 | 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 48 65 61 70 49 6e 66 | formation.RtlQueryProcessHeapInf |
| 9420 | 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 48 65 | ormation.__imp_RtlQueryProcessHe |
| 9440 | 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4c 64 72 51 75 65 72 79 50 72 6f 63 65 73 73 4d 6f 64 | apInformation.LdrQueryProcessMod |
| 9460 | 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4c 64 72 51 75 65 72 79 50 72 6f | uleInformation.__imp_LdrQueryPro |
| 9480 | 63 65 73 73 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4c 64 72 4f 70 65 6e 49 6d 61 | cessModuleInformation.LdrOpenIma |
| 94a0 | 67 65 46 69 6c 65 4f 70 74 69 6f 6e 73 4b 65 79 00 5f 5f 69 6d 70 5f 4c 64 72 4f 70 65 6e 49 6d | geFileOptionsKey.__imp_LdrOpenIm |
| 94c0 | 61 67 65 46 69 6c 65 4f 70 74 69 6f 6e 73 4b 65 79 00 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 | ageFileOptionsKey.LdrQueryImageF |
| 94e0 | 69 6c 65 4b 65 79 4f 70 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4c 64 72 51 75 65 72 79 49 6d 61 67 65 | ileKeyOption.__imp_LdrQueryImage |
| 9500 | 46 69 6c 65 4b 65 79 4f 70 74 69 6f 6e 00 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 45 | FileKeyOption.LdrQueryImageFileE |
| 9520 | 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 4c 64 72 51 75 65 72 79 49 6d | xecutionOptions.__imp_LdrQueryIm |
| 9540 | 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 00 4c 64 72 51 75 65 72 79 | ageFileExecutionOptions.LdrQuery |
| 9560 | 49 6d 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 45 78 00 5f 5f 69 6d | ImageFileExecutionOptionsEx.__im |
| 9580 | 70 5f 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 | p_LdrQueryImageFileExecutionOpti |
| 95a0 | 6f 6e 73 45 78 00 52 74 6c 49 6e 69 74 4e 6c 73 54 61 62 6c 65 73 00 5f 5f 69 6d 70 5f 52 74 6c | onsEx.RtlInitNlsTables.__imp_Rtl |
| 95c0 | 49 6e 69 74 4e 6c 73 54 61 62 6c 65 73 00 52 74 6c 52 65 73 65 74 52 74 6c 54 72 61 6e 73 6c 61 | InitNlsTables.RtlResetRtlTransla |
| 95e0 | 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 73 65 74 52 74 6c 54 72 61 6e 73 6c 61 74 69 | tions.__imp_RtlResetRtlTranslati |
| 9600 | 6f 6e 73 00 52 74 6c 43 75 73 74 6f 6d 43 50 54 6f 55 6e 69 63 6f 64 65 4e 00 5f 5f 69 6d 70 5f | ons.RtlCustomCPToUnicodeN.__imp_ |
| 9620 | 52 74 6c 43 75 73 74 6f 6d 43 50 54 6f 55 6e 69 63 6f 64 65 4e 00 52 74 6c 55 6e 69 63 6f 64 65 | RtlCustomCPToUnicodeN.RtlUnicode |
| 9640 | 54 6f 43 75 73 74 6f 6d 43 50 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 43 75 | ToCustomCPN.__imp_RtlUnicodeToCu |
| 9660 | 73 74 6f 6d 43 50 4e 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 43 75 73 74 6f 6d | stomCPN.RtlUpcaseUnicodeToCustom |
| 9680 | 43 50 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 43 75 73 74 | CPN.__imp_RtlUpcaseUnicodeToCust |
| 96a0 | 6f 6d 43 50 4e 00 52 74 6c 49 6e 69 74 43 6f 64 65 50 61 67 65 54 61 62 6c 65 00 5f 5f 69 6d 70 | omCPN.RtlInitCodePageTable.__imp |
| 96c0 | 5f 52 74 6c 49 6e 69 74 43 6f 64 65 50 61 67 65 54 61 62 6c 65 00 4c 64 72 50 72 6f 63 65 73 73 | _RtlInitCodePageTable.LdrProcess |
| 96e0 | 52 65 6c 6f 63 61 74 69 6f 6e 42 6c 6f 63 6b 00 5f 5f 69 6d 70 5f 4c 64 72 50 72 6f 63 65 73 73 | RelocationBlock.__imp_LdrProcess |
| 9700 | 52 65 6c 6f 63 61 74 69 6f 6e 42 6c 6f 63 6b 00 4c 64 72 56 65 72 69 66 79 49 6d 61 67 65 4d 61 | RelocationBlock.LdrVerifyImageMa |
| 9720 | 74 63 68 65 73 43 68 65 63 6b 73 75 6d 00 5f 5f 69 6d 70 5f 4c 64 72 56 65 72 69 66 79 49 6d 61 | tchesChecksum.__imp_LdrVerifyIma |
| 9740 | 67 65 4d 61 74 63 68 65 73 43 68 65 63 6b 73 75 6d 00 56 65 72 53 65 74 43 6f 6e 64 69 74 69 6f | geMatchesChecksum.VerSetConditio |
| 9760 | 6e 4d 61 73 6b 00 5f 5f 69 6d 70 5f 56 65 72 53 65 74 43 6f 6e 64 69 74 69 6f 6e 4d 61 73 6b 00 | nMask.__imp_VerSetConditionMask. |
| 9780 | 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 00 5f 5f | RtlAddVectoredContinueHandler.__ |
| 97a0 | 69 6d 70 5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 | imp_RtlAddVectoredContinueHandle |
| 97c0 | 72 00 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c | r.RtlRemoveVectoredContinueHandl |
| 97e0 | 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e | er.__imp_RtlRemoveVectoredContin |
| 9800 | 75 65 48 61 6e 64 6c 65 72 00 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64 45 78 63 65 70 74 69 6f | ueHandler.RtlAddVectoredExceptio |
| 9820 | 6e 48 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64 45 78 63 | nHandler.__imp_RtlAddVectoredExc |
| 9840 | 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 45 | eptionHandler.RtlRemoveVectoredE |
| 9860 | 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6d 6f 76 65 56 | xceptionHandler.__imp_RtlRemoveV |
| 9880 | 65 63 74 6f 72 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 73 74 | ectoredExceptionHandler.__imp_st |
| 98a0 | 72 6c 65 6e 00 73 74 72 6c 65 6e 00 5f 5f 69 6d 70 5f 73 74 72 63 70 79 00 73 74 72 63 70 79 00 | rlen.strlen.__imp_strcpy.strcpy. |
| 98c0 | 5f 5f 69 6d 70 5f 73 74 72 73 74 72 00 73 74 72 73 74 72 00 5f 5f 69 6d 70 5f 73 74 72 63 68 72 | __imp_strstr.strstr.__imp_strchr |
| 98e0 | 00 73 74 72 63 68 72 00 5f 5f 69 6d 70 5f 73 74 72 72 63 68 72 00 73 74 72 72 63 68 72 00 5f 5f | .strchr.__imp_strrchr.strrchr.__ |
| 9900 | 69 6d 70 5f 73 74 72 73 70 6e 00 73 74 72 73 70 6e 00 5f 5f 69 6d 70 5f 73 74 72 63 73 70 6e 00 | imp_strspn.strspn.__imp_strcspn. |
| 9920 | 73 74 72 63 73 70 6e 00 5f 5f 69 6d 70 5f 73 74 72 70 62 72 6b 00 73 74 72 70 62 72 6b 00 5f 5f | strcspn.__imp_strpbrk.strpbrk.__ |
| 9940 | 69 6d 70 5f 73 74 72 63 61 74 00 73 74 72 63 61 74 00 5f 5f 69 6d 70 5f 73 74 72 63 6d 70 00 73 | imp_strcat.strcat.__imp_strcmp.s |
| 9960 | 74 72 63 6d 70 00 5f 5f 69 6d 70 5f 73 74 72 6e 63 6d 70 00 73 74 72 6e 63 6d 70 00 5f 5f 69 6d | trcmp.__imp_strncmp.strncmp.__im |
| 9980 | 70 5f 73 74 72 6e 63 61 74 00 73 74 72 6e 63 61 74 00 5f 5f 69 6d 70 5f 73 74 72 6e 63 70 79 00 | p_strncat.strncat.__imp_strncpy. |
| 99a0 | 73 74 72 6e 63 70 79 00 5f 5f 69 6d 70 5f 73 74 72 74 6f 6c 00 73 74 72 74 6f 6c 00 5f 5f 69 6d | strncpy.__imp_strtol.strtol.__im |
| 99c0 | 70 5f 73 74 72 74 6f 75 6c 00 73 74 72 74 6f 75 6c 00 5f 5f 69 6d 70 5f 5f 73 74 72 6c 77 72 00 | p_strtoul.strtoul.__imp__strlwr. |
| 99e0 | 5f 73 74 72 6c 77 72 00 5f 5f 69 6d 70 5f 5f 73 74 72 69 63 6d 70 00 5f 73 74 72 69 63 6d 70 00 | _strlwr.__imp__stricmp._stricmp. |
| 9a00 | 5f 5f 69 6d 70 5f 5f 73 74 72 6e 69 63 6d 70 00 5f 73 74 72 6e 69 63 6d 70 00 5f 5f 69 6d 70 5f | __imp__strnicmp._strnicmp.__imp_ |
| 9a20 | 5f 73 74 72 63 6d 70 69 00 5f 73 74 72 63 6d 70 69 00 5f 5f 69 6d 70 5f 5f 73 74 72 75 70 72 00 | _strcmpi._strcmpi.__imp__strupr. |
| 9a40 | 5f 73 74 72 75 70 72 00 5f 5f 69 6d 70 5f 74 6f 75 70 70 65 72 00 74 6f 75 70 70 65 72 00 5f 5f | _strupr.__imp_toupper.toupper.__ |
| 9a60 | 69 6d 70 5f 74 6f 6c 6f 77 65 72 00 74 6f 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 74 6f 77 6c 6f 77 | imp_tolower.tolower.__imp_towlow |
| 9a80 | 65 72 00 74 6f 77 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 74 6f 77 75 70 70 65 72 00 74 6f 77 75 70 | er.towlower.__imp_towupper.towup |
| 9aa0 | 70 65 72 00 5f 5f 69 6d 70 5f 77 63 73 6c 65 6e 00 77 63 73 6c 65 6e 00 5f 5f 69 6d 70 5f 77 63 | per.__imp_wcslen.wcslen.__imp_wc |
| 9ac0 | 73 63 70 79 00 77 63 73 63 70 79 00 5f 5f 69 6d 70 5f 77 63 73 73 74 72 00 77 63 73 73 74 72 00 | scpy.wcscpy.__imp_wcsstr.wcsstr. |
| 9ae0 | 5f 5f 69 6d 70 5f 77 63 73 63 68 72 00 77 63 73 63 68 72 00 5f 5f 69 6d 70 5f 77 63 73 74 6f 6c | __imp_wcschr.wcschr.__imp_wcstol |
| 9b00 | 00 77 63 73 74 6f 6c 00 5f 5f 69 6d 70 5f 77 63 73 74 6f 75 6c 00 77 63 73 74 6f 75 6c 00 5f 5f | .wcstol.__imp_wcstoul.wcstoul.__ |
| 9b20 | 69 6d 70 5f 5f 77 63 73 74 6f 75 69 36 34 00 5f 77 63 73 74 6f 75 69 36 34 00 5f 5f 69 6d 70 5f | imp__wcstoui64._wcstoui64.__imp_ |
| 9b40 | 77 63 73 72 63 68 72 00 77 63 73 72 63 68 72 00 5f 5f 69 6d 70 5f 77 63 73 63 73 70 6e 00 77 63 | wcsrchr.wcsrchr.__imp_wcscspn.wc |
| 9b60 | 73 63 73 70 6e 00 5f 5f 69 6d 70 5f 77 63 73 70 62 72 6b 00 77 63 73 70 62 72 6b 00 5f 5f 69 6d | scspn.__imp_wcspbrk.wcspbrk.__im |
| 9b80 | 70 5f 77 63 73 63 61 74 00 77 63 73 63 61 74 00 5f 5f 69 6d 70 5f 77 63 73 63 6d 70 00 77 63 73 | p_wcscat.wcscat.__imp_wcscmp.wcs |
| 9ba0 | 63 6d 70 00 5f 5f 69 6d 70 5f 77 63 73 73 70 6e 00 77 63 73 73 70 6e 00 5f 5f 69 6d 70 5f 77 63 | cmp.__imp_wcsspn.wcsspn.__imp_wc |
| 9bc0 | 73 6e 63 6d 70 00 77 63 73 6e 63 6d 70 00 5f 5f 69 6d 70 5f 77 63 73 6e 63 61 74 00 77 63 73 6e | sncmp.wcsncmp.__imp_wcsncat.wcsn |
| 9be0 | 63 61 74 00 5f 5f 69 6d 70 5f 77 63 73 6e 63 70 79 00 77 63 73 6e 63 70 79 00 5f 5f 69 6d 70 5f | cat.__imp_wcsncpy.wcsncpy.__imp_ |
| 9c00 | 5f 77 63 73 75 70 72 00 5f 77 63 73 75 70 72 00 5f 5f 69 6d 70 5f 5f 77 63 73 6c 77 72 00 5f 77 | _wcsupr._wcsupr.__imp__wcslwr._w |
| 9c20 | 63 73 6c 77 72 00 5f 5f 69 6d 70 5f 5f 77 63 73 69 63 6d 70 00 5f 77 63 73 69 63 6d 70 00 5f 5f | cslwr.__imp__wcsicmp._wcsicmp.__ |
| 9c40 | 69 6d 70 5f 5f 77 63 73 6e 69 63 6d 70 00 5f 77 63 73 6e 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 6d | imp__wcsnicmp._wcsnicmp.__imp__m |
| 9c60 | 65 6d 63 63 70 79 00 5f 6d 65 6d 63 63 70 79 00 5f 5f 69 6d 70 5f 6d 62 73 74 6f 77 63 73 00 6d | emccpy._memccpy.__imp_mbstowcs.m |
| 9c80 | 62 73 74 6f 77 63 73 00 5f 5f 69 6d 70 5f 77 63 73 74 6f 6d 62 73 00 77 63 73 74 6f 6d 62 73 00 | bstowcs.__imp_wcstombs.wcstombs. |
| 9ca0 | 5f 5f 69 6d 70 5f 6d 65 6d 63 68 72 00 6d 65 6d 63 68 72 00 5f 5f 69 6d 70 5f 6d 65 6d 73 65 74 | __imp_memchr.memchr.__imp_memset |
| 9cc0 | 00 6d 65 6d 73 65 74 00 5f 5f 69 6d 70 5f 6d 65 6d 63 70 79 00 6d 65 6d 63 70 79 00 5f 5f 69 6d | .memset.__imp_memcpy.memcpy.__im |
| 9ce0 | 70 5f 6d 65 6d 6d 6f 76 65 00 6d 65 6d 6d 6f 76 65 00 5f 5f 69 6d 70 5f 6d 65 6d 63 6d 70 00 6d | p_memmove.memmove.__imp_memcmp.m |
| 9d00 | 65 6d 63 6d 70 00 5f 5f 69 6d 70 5f 5f 6d 65 6d 69 63 6d 70 00 5f 6d 65 6d 69 63 6d 70 00 5f 5f | emcmp.__imp__memicmp._memicmp.__ |
| 9d20 | 69 6d 70 5f 73 70 72 69 6e 74 66 00 73 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 73 6e 70 72 69 | imp_sprintf.sprintf.__imp__snpri |
| 9d40 | 6e 74 66 00 5f 73 6e 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 73 77 70 72 69 6e 74 66 00 73 77 70 | ntf._snprintf.__imp_swprintf.swp |
| 9d60 | 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 73 6e 77 70 72 69 6e 74 66 00 5f 73 6e 77 70 72 69 6e 74 | rintf.__imp__snwprintf._snwprint |
| 9d80 | 66 00 5f 5f 69 6d 70 5f 76 73 70 72 69 6e 74 66 00 76 73 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f | f.__imp_vsprintf.vsprintf.__imp_ |
| 9da0 | 5f 76 73 6e 70 72 69 6e 74 66 00 5f 76 73 6e 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 76 73 63 | _vsnprintf._vsnprintf.__imp__vsc |
| 9dc0 | 77 70 72 69 6e 74 66 00 5f 76 73 63 77 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 73 73 63 61 6e 66 | wprintf._vscwprintf.__imp_sscanf |
| 9de0 | 00 73 73 63 61 6e 66 00 5f 5f 69 6d 70 5f 71 73 6f 72 74 00 71 73 6f 72 74 00 5f 5f 69 6d 70 5f | .sscanf.__imp_qsort.qsort.__imp_ |
| 9e00 | 61 74 6f 6c 00 61 74 6f 6c 00 5f 5f 69 6d 70 5f 5f 77 74 6f 6c 00 5f 77 74 6f 6c 00 5f 5f 69 6d | atol.atol.__imp__wtol._wtol.__im |
| 9e20 | 70 5f 61 74 6f 69 00 61 74 6f 69 00 5f 5f 69 6d 70 5f 5f 77 74 6f 69 00 5f 77 74 6f 69 00 5f 5f | p_atoi.atoi.__imp__wtoi._wtoi.__ |
| 9e40 | 69 6d 70 5f 5f 61 74 6f 69 36 34 00 5f 61 74 6f 69 36 34 00 5f 5f 69 6d 70 5f 5f 77 74 6f 69 36 | imp__atoi64._atoi64.__imp__wtoi6 |
| 9e60 | 34 00 5f 77 74 6f 69 36 34 00 5f 5f 69 6d 70 5f 5f 69 74 6f 61 00 5f 69 74 6f 61 00 5f 5f 69 6d | 4._wtoi64.__imp__itoa._itoa.__im |
| 9e80 | 70 5f 5f 69 74 6f 77 00 5f 69 74 6f 77 00 5f 5f 69 6d 70 5f 5f 69 36 34 74 6f 61 00 5f 69 36 34 | p__itow._itow.__imp__i64toa._i64 |
| 9ea0 | 74 6f 61 00 5f 5f 69 6d 70 5f 5f 69 36 34 74 6f 77 00 5f 69 36 34 74 6f 77 00 5f 5f 69 6d 70 5f | toa.__imp__i64tow._i64tow.__imp_ |
| 9ec0 | 5f 6c 74 6f 61 00 5f 6c 74 6f 61 00 5f 5f 69 6d 70 5f 5f 6c 74 6f 77 00 5f 6c 74 6f 77 00 5f 5f | _ltoa._ltoa.__imp__ltow._ltow.__ |
| 9ee0 | 69 6d 70 5f 5f 75 6c 74 6f 61 00 5f 75 6c 74 6f 61 00 5f 5f 69 6d 70 5f 5f 75 69 36 34 74 6f 61 | imp__ultoa._ultoa.__imp__ui64toa |
| 9f00 | 00 5f 75 69 36 34 74 6f 61 00 5f 5f 69 6d 70 5f 5f 75 6c 74 6f 77 00 5f 75 6c 74 6f 77 00 5f 5f | ._ui64toa.__imp__ultow._ultow.__ |
| 9f20 | 69 6d 70 5f 5f 73 70 6c 69 74 70 61 74 68 00 5f 73 70 6c 69 74 70 61 74 68 00 5f 5f 69 6d 70 5f | imp__splitpath._splitpath.__imp_ |
| 9f40 | 69 73 75 70 70 65 72 00 69 73 75 70 70 65 72 00 5f 5f 69 6d 70 5f 69 73 6c 6f 77 65 72 00 69 73 | isupper.isupper.__imp_islower.is |
| 9f60 | 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 69 73 64 69 67 69 74 00 69 73 64 69 67 69 74 00 5f 5f 69 6d | lower.__imp_isdigit.isdigit.__im |
| 9f80 | 70 5f 69 73 61 6c 70 68 61 00 69 73 61 6c 70 68 61 00 5f 5f 69 6d 70 5f 69 73 78 64 69 67 69 74 | p_isalpha.isalpha.__imp_isxdigit |
| 9fa0 | 00 69 73 78 64 69 67 69 74 00 5f 5f 69 6d 70 5f 69 73 73 70 61 63 65 00 69 73 73 70 61 63 65 00 | .isxdigit.__imp_isspace.isspace. |
| 9fc0 | 5f 5f 69 6d 70 5f 69 73 70 75 6e 63 74 00 69 73 70 75 6e 63 74 00 5f 5f 69 6d 70 5f 69 73 61 6c | __imp_ispunct.ispunct.__imp_isal |
| 9fe0 | 6e 75 6d 00 69 73 61 6c 6e 75 6d 00 5f 5f 69 6d 70 5f 69 73 70 72 69 6e 74 00 69 73 70 72 69 6e | num.isalnum.__imp_isprint.isprin |
| a000 | 74 00 5f 5f 69 6d 70 5f 69 73 67 72 61 70 68 00 69 73 67 72 61 70 68 00 5f 5f 69 6d 70 5f 69 73 | t.__imp_isgraph.isgraph.__imp_is |
| a020 | 63 6e 74 72 6c 00 69 73 63 6e 74 72 6c 00 5f 5f 69 6d 70 5f 5f 74 6f 6c 6f 77 65 72 00 5f 74 6f | cntrl.iscntrl.__imp__tolower._to |
| a040 | 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 74 6f 75 70 70 65 72 00 5f 74 6f 75 70 70 65 72 00 5f 5f | lower.__imp__toupper._toupper.__ |
| a060 | 69 6d 70 5f 5f 5f 69 73 61 73 63 69 69 00 5f 5f 69 73 61 73 63 69 69 00 5f 5f 69 6d 70 5f 5f 5f | imp___isascii.__isascii.__imp___ |
| a080 | 74 6f 61 73 63 69 69 00 5f 5f 74 6f 61 73 63 69 69 00 5f 5f 69 6d 70 5f 5f 5f 69 73 63 73 79 6d | toascii.__toascii.__imp___iscsym |
| a0a0 | 66 00 5f 5f 69 73 63 73 79 6d 66 00 5f 5f 69 6d 70 5f 5f 5f 69 73 63 73 79 6d 00 5f 5f 69 73 63 | f.__iscsymf.__imp___iscsym.__isc |
| a0c0 | 73 79 6d 00 5f 5f 69 6d 70 5f 62 73 65 61 72 63 68 00 62 73 65 61 72 63 68 00 5f 5f 69 6d 70 5f | sym.__imp_bsearch.bsearch.__imp_ |
| a0e0 | 5f 75 69 36 34 74 6f 77 00 5f 75 69 36 34 74 6f 77 00 5f 5f 69 6d 70 5f 5f 6c 66 69 6e 64 00 5f | _ui64tow._ui64tow.__imp__lfind._ |
| a100 | 6c 66 69 6e 64 00 5f 5f 69 6d 70 5f 5f 76 73 6e 77 70 72 69 6e 74 66 00 5f 76 73 6e 77 70 72 69 | lfind.__imp__vsnwprintf._vsnwpri |
| a120 | 6e 74 66 00 5f 5f 69 6d 70 5f 69 73 77 61 6c 70 68 61 00 69 73 77 61 6c 70 68 61 00 5f 5f 69 6d | ntf.__imp_iswalpha.iswalpha.__im |
| a140 | 70 5f 69 73 77 63 74 79 70 65 00 69 73 77 63 74 79 70 65 00 5f 5f 69 6d 70 5f 69 73 77 78 64 69 | p_iswctype.iswctype.__imp_iswxdi |
| a160 | 67 69 74 00 69 73 77 78 64 69 67 69 74 00 5f 5f 69 6d 70 5f 69 73 77 64 69 67 69 74 00 69 73 77 | git.iswxdigit.__imp_iswdigit.isw |
| a180 | 64 69 67 69 74 00 5f 5f 69 6d 70 5f 69 73 77 73 70 61 63 65 00 69 73 77 73 70 61 63 65 00 5f 5f | digit.__imp_iswspace.iswspace.__ |
| a1a0 | 69 6d 70 5f 69 73 77 6c 6f 77 65 72 00 69 73 77 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 66 6c 74 | imp_iswlower.iswlower.__imp__flt |
| a1c0 | 75 73 65 64 00 5f 66 6c 74 75 73 65 64 00 52 74 6c 50 72 6f 74 65 63 74 48 65 61 70 00 5f 5f 69 | used._fltused.RtlProtectHeap.__i |
| a1e0 | 6d 70 5f 52 74 6c 50 72 6f 74 65 63 74 48 65 61 70 00 52 74 6c 53 65 74 55 6e 69 63 6f 64 65 43 | mp_RtlProtectHeap.RtlSetUnicodeC |
| a200 | 61 6c 6c 6f 75 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 55 6e 69 63 6f 64 65 43 61 6c 6c 6f | allouts.__imp_RtlSetUnicodeCallo |
| a220 | 75 74 73 00 3f 52 74 6c 43 6f 6e 76 65 72 74 56 61 72 69 61 6e 74 54 6f 50 72 6f 70 65 72 74 79 | uts.?RtlConvertVariantToProperty |
| a240 | 40 40 59 41 50 45 41 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c | @@YAPEAUtagSERIALIZEDPROPERTYVAL |
| a260 | 55 45 40 40 50 45 42 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e 54 40 40 47 50 45 41 55 31 40 50 | UE@@PEBUtagPROPVARIANT@@GPEAU1@P |
| a280 | 45 41 4b 4b 45 32 40 5a 00 5f 5f 69 6d 70 5f 3f 52 74 6c 43 6f 6e 76 65 72 74 56 61 72 69 61 6e | EAKKE2@Z.__imp_?RtlConvertVarian |
| a2a0 | 74 54 6f 50 72 6f 70 65 72 74 79 40 40 59 41 50 45 41 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 | tToProperty@@YAPEAUtagSERIALIZED |
| a2c0 | 50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 50 45 42 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e | PROPERTYVALUE@@PEBUtagPROPVARIAN |
| a2e0 | 54 40 40 47 50 45 41 55 31 40 50 45 41 4b 4b 45 32 40 5a 00 3f 52 74 6c 43 6f 6e 76 65 72 74 50 | T@@GPEAU1@PEAKKE2@Z.?RtlConvertP |
| a300 | 72 6f 70 65 72 74 79 54 6f 56 61 72 69 61 6e 74 40 40 59 41 45 50 45 42 55 74 61 67 53 45 52 49 | ropertyToVariant@@YAEPEBUtagSERI |
| a320 | 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 47 50 45 41 55 74 61 67 50 52 4f | ALIZEDPROPERTYVALUE@@GPEAUtagPRO |
| a340 | 50 56 41 52 49 41 4e 54 40 40 50 45 41 56 50 4d 65 6d 6f 72 79 41 6c 6c 6f 63 61 74 6f 72 40 40 | PVARIANT@@PEAVPMemoryAllocator@@ |
| a360 | 40 5a 00 5f 5f 69 6d 70 5f 3f 52 74 6c 43 6f 6e 76 65 72 74 50 72 6f 70 65 72 74 79 54 6f 56 61 | @Z.__imp_?RtlConvertPropertyToVa |
| a380 | 72 69 61 6e 74 40 40 59 41 45 50 45 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 | riant@@YAEPEBUtagSERIALIZEDPROPE |
| a3a0 | 52 54 59 56 41 4c 55 45 40 40 47 50 45 41 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e 54 40 40 50 | RTYVALUE@@GPEAUtagPROPVARIANT@@P |
| a3c0 | 45 41 56 50 4d 65 6d 6f 72 79 41 6c 6c 6f 63 61 74 6f 72 40 40 40 5a 00 3f 50 72 6f 70 65 72 74 | EAVPMemoryAllocator@@@Z.?Propert |
| a3e0 | 79 4c 65 6e 67 74 68 41 73 56 61 72 69 61 6e 74 40 40 59 41 4b 50 45 42 55 74 61 67 53 45 52 49 | yLengthAsVariant@@YAKPEBUtagSERI |
| a400 | 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 4b 47 45 40 5a 00 5f 5f 69 6d 70 | ALIZEDPROPERTYVALUE@@KGE@Z.__imp |
| a420 | 5f 3f 50 72 6f 70 65 72 74 79 4c 65 6e 67 74 68 41 73 56 61 72 69 61 6e 74 40 40 59 41 4b 50 45 | _?PropertyLengthAsVariant@@YAKPE |
| a440 | 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 4b 47 | BUtagSERIALIZEDPROPERTYVALUE@@KG |
| a460 | 45 40 5a 00 52 74 6c 52 65 67 69 73 74 65 72 57 61 69 74 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 67 | E@Z.RtlRegisterWait.__imp_RtlReg |
| a480 | 69 73 74 65 72 57 61 69 74 00 52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 74 00 5f 5f 69 6d | isterWait.RtlDeregisterWait.__im |
| a4a0 | 70 5f 52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 74 00 52 74 6c 44 65 72 65 67 69 73 74 65 | p_RtlDeregisterWait.RtlDeregiste |
| a4c0 | 72 57 61 69 74 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 74 45 | rWaitEx.__imp_RtlDeregisterWaitE |
| a4e0 | 78 00 52 74 6c 51 75 65 75 65 57 6f 72 6b 49 74 65 6d 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 75 | x.RtlQueueWorkItem.__imp_RtlQueu |
| a500 | 65 57 6f 72 6b 49 74 65 6d 00 52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 51 75 65 75 65 00 5f 5f | eWorkItem.RtlCreateTimerQueue.__ |
| a520 | 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 51 75 65 75 65 00 52 74 6c 43 72 65 61 74 | imp_RtlCreateTimerQueue.RtlCreat |
| a540 | 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 00 52 74 6c 55 | eTimer.__imp_RtlCreateTimer.RtlU |
| a560 | 70 64 61 74 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 64 61 74 65 54 69 6d 65 72 00 | pdateTimer.__imp_RtlUpdateTimer. |
| a580 | 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 54 69 | RtlDeleteTimer.__imp_RtlDeleteTi |
| a5a0 | 6d 65 72 00 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75 65 00 5f 5f 69 6d 70 5f 52 74 | mer.RtlDeleteTimerQueue.__imp_Rt |
| a5c0 | 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75 65 00 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 | lDeleteTimerQueue.RtlDeleteTimer |
| a5e0 | 51 75 65 75 65 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75 | QueueEx.__imp_RtlDeleteTimerQueu |
| a600 | 65 45 78 00 52 74 6c 53 65 74 54 68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74 46 75 6e 63 00 5f 5f | eEx.RtlSetThreadPoolStartFunc.__ |
| a620 | 69 6d 70 5f 52 74 6c 53 65 74 54 68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74 46 75 6e 63 00 52 74 | imp_RtlSetThreadPoolStartFunc.Rt |
| a640 | 6c 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 52 | lSetIoCompletionCallback.__imp_R |
| a660 | 74 6c 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 00 52 74 6c 44 65 62 | tlSetIoCompletionCallback.RtlDeb |
| a680 | 75 67 50 72 69 6e 74 54 69 6d 65 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 62 75 67 50 72 69 6e 74 | ugPrintTimes.__imp_RtlDebugPrint |
| a6a0 | 54 69 6d 65 73 00 52 74 6c 53 65 74 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 69 | Times.RtlSetTimer.__imp_RtlSetTi |
| a6c0 | 6d 65 72 00 52 74 6c 43 61 6e 63 65 6c 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 61 6e 63 | mer.RtlCancelTimer.__imp_RtlCanc |
| a6e0 | 65 6c 54 69 6d 65 72 00 52 74 6c 44 6e 73 48 6f 73 74 4e 61 6d 65 54 6f 43 6f 6d 70 75 74 65 72 | elTimer.RtlDnsHostNameToComputer |
| a700 | 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 6e 73 48 6f 73 74 4e 61 6d 65 54 6f 43 6f 6d 70 75 | Name.__imp_RtlDnsHostNameToCompu |
| a720 | 74 65 72 4e 61 6d 65 00 4c 64 72 4c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 | terName.LdrLoadAlternateResource |
| a740 | 4d 6f 64 75 6c 65 00 5f 5f 69 6d 70 5f 4c 64 72 4c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 | Module.__imp_LdrLoadAlternateRes |
| a760 | 6f 75 72 63 65 4d 6f 64 75 6c 65 00 4c 64 72 55 6e 6c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 | ourceModule.LdrUnloadAlternateRe |
| a780 | 73 6f 75 72 63 65 4d 6f 64 75 6c 65 00 5f 5f 69 6d 70 5f 4c 64 72 55 6e 6c 6f 61 64 41 6c 74 65 | sourceModule.__imp_LdrUnloadAlte |
| a7a0 | 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 00 4c 64 72 41 6c 74 65 72 6e 61 74 65 | rnateResourceModule.LdrAlternate |
| a7c0 | 52 65 73 6f 75 72 63 65 73 45 6e 61 62 6c 65 64 00 5f 5f 69 6d 70 5f 4c 64 72 41 6c 74 65 72 6e | ResourcesEnabled.__imp_LdrAltern |
| a7e0 | 61 74 65 52 65 73 6f 75 72 63 65 73 45 6e 61 62 6c 65 64 00 4c 64 72 46 6c 75 73 68 41 6c 74 65 | ateResourcesEnabled.LdrFlushAlte |
| a800 | 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 73 00 5f 5f 69 6d 70 5f 4c 64 72 46 6c | rnateResourceModules.__imp_LdrFl |
| a820 | 75 73 68 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 73 00 52 74 6c 46 | ushAlternateResourceModules.RtlF |
| a840 | 69 6e 64 4c 65 61 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 00 5f 5f 69 6d 70 5f 52 74 6c | indLeastSignificantBit.__imp_Rtl |
| a860 | 46 69 6e 64 4c 65 61 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 00 52 74 6c 46 69 6e 64 4d | FindLeastSignificantBit.RtlFindM |
| a880 | 6f 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 4d | ostSignificantBit.__imp_RtlFindM |
| a8a0 | 6f 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 00 52 74 6c 43 72 65 61 74 65 41 63 74 69 76 | ostSignificantBit.RtlCreateActiv |
| a8c0 | 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 41 63 74 69 | ationContext.__imp_RtlCreateActi |
| a8e0 | 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 41 64 64 52 65 66 41 63 74 69 76 61 74 69 6f | vationContext.RtlAddRefActivatio |
| a900 | 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 52 65 66 41 63 74 69 76 61 74 69 | nContext.__imp_RtlAddRefActivati |
| a920 | 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 52 65 6c 65 61 73 65 41 63 74 69 76 61 74 69 6f 6e 43 6f | onContext.RtlReleaseActivationCo |
| a940 | 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 61 73 65 41 63 74 69 76 61 74 69 6f 6e | ntext.__imp_RtlReleaseActivation |
| a960 | 43 6f 6e 74 65 78 74 00 52 74 6c 5a 6f 6d 62 69 66 79 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 | Context.RtlZombifyActivationCont |
| a980 | 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 5a 6f 6d 62 69 66 79 41 63 74 69 76 61 74 69 6f 6e 43 6f | ext.__imp_RtlZombifyActivationCo |
| a9a0 | 6e 74 65 78 74 00 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 | ntext.RtlActivateActivationConte |
| a9c0 | 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f | xt.__imp_RtlActivateActivationCo |
| a9e0 | 6e 74 65 78 74 00 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 | ntext.RtlActivateActivationConte |
| aa00 | 78 74 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e | xtEx.__imp_RtlActivateActivation |
| aa20 | 43 6f 6e 74 65 78 74 45 78 00 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f | ContextEx.RtlDeactivateActivatio |
| aa40 | 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 | nContext.__imp_RtlDeactivateActi |
| aa60 | 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 44 6f 73 41 70 70 6c 79 46 69 6c 65 49 73 6f | vationContext.RtlDosApplyFileIso |
| aa80 | 6c 61 74 69 6f 6e 52 65 64 69 72 65 63 74 69 6f 6e 5f 55 73 74 72 00 5f 5f 69 6d 70 5f 52 74 6c | lationRedirection_Ustr.__imp_Rtl |
| aaa0 | 44 6f 73 41 70 70 6c 79 46 69 6c 65 49 73 6f 6c 61 74 69 6f 6e 52 65 64 69 72 65 63 74 69 6f 6e | DosApplyFileIsolationRedirection |
| aac0 | 5f 55 73 74 72 00 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 | _Ustr.RtlFindActivationContextSe |
| aae0 | 63 74 69 6f 6e 47 75 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 69 6f | ctionGuid.__imp_RtlFindActivatio |
| ab00 | 6e 43 6f 6e 74 65 78 74 53 65 63 74 69 6f 6e 47 75 69 64 00 52 74 6c 46 69 6e 64 41 63 74 69 76 | nContextSectionGuid.RtlFindActiv |
| ab20 | 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 69 6f 6e 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f | ationContextSectionString.__imp_ |
| ab40 | 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 69 6f 6e 53 | RtlFindActivationContextSectionS |
| ab60 | 74 72 69 6e 67 00 52 74 6c 46 72 65 65 54 68 72 65 61 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e | tring.RtlFreeThreadActivationCon |
| ab80 | 74 65 78 74 53 74 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 54 68 72 65 61 64 41 63 74 | textStack.__imp_RtlFreeThreadAct |
| aba0 | 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 52 74 6c 47 65 74 41 63 74 69 76 65 | ivationContextStack.RtlGetActive |
| abc0 | 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 41 63 | ActivationContext.__imp_RtlGetAc |
| abe0 | 74 69 76 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 49 73 41 63 74 69 76 | tiveActivationContext.RtlIsActiv |
| ac00 | 61 74 69 6f 6e 43 6f 6e 74 65 78 74 41 63 74 69 76 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 41 63 | ationContextActive.__imp_RtlIsAc |
| ac20 | 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 41 63 74 69 76 65 00 52 74 6c 51 75 65 72 79 49 6e | tivationContextActive.RtlQueryIn |
| ac40 | 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 | formationActiveActivationContext |
| ac60 | 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 65 | .__imp_RtlQueryInformationActive |
| ac80 | 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 51 75 65 72 79 49 6e 66 6f 72 6d | ActivationContext.RtlQueryInform |
| aca0 | 61 74 69 6f 6e 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c | ationActivationContext.__imp_Rtl |
| acc0 | 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 | QueryInformationActivationContex |
| ace0 | 74 00 52 74 6c 48 61 73 68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c | t.RtlHashUnicodeString.__imp_Rtl |
| ad00 | 48 61 73 68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 | HashUnicodeString.RtlGetCurrentP |
| ad20 | 65 62 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 65 62 00 52 74 6c 43 6f 6d | eb.__imp_RtlGetCurrentPeb.RtlCom |
| ad40 | 70 75 74 65 50 72 69 76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 | putePrivatizedDllName_U.__imp_Rt |
| ad60 | 6c 43 6f 6d 70 75 74 65 50 72 69 76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d 65 5f 55 00 52 74 6c 49 | lComputePrivatizedDllName_U.RtlI |
| ad80 | 6e 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 4d 65 6d | nitMemoryStream.__imp_RtlInitMem |
| ada0 | 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 41 64 64 52 65 66 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 | oryStream.RtlAddRefMemoryStream. |
| adc0 | 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 52 65 66 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 52 | __imp_RtlAddRefMemoryStream.RtlR |
| ade0 | 65 6c 65 61 73 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 | eleaseMemoryStream.__imp_RtlRele |
| ae00 | 61 73 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 51 75 65 72 79 49 6e 74 65 72 66 61 63 | aseMemoryStream.RtlQueryInterfac |
| ae20 | 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 49 6e 74 65 | eMemoryStream.__imp_RtlQueryInte |
| ae40 | 72 66 61 63 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 52 65 61 64 4d 65 6d 6f 72 79 53 | rfaceMemoryStream.RtlReadMemoryS |
| ae60 | 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 61 64 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 | tream.__imp_RtlReadMemoryStream. |
| ae80 | 52 74 6c 57 72 69 74 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 57 72 | RtlWriteMemoryStream.__imp_RtlWr |
| aea0 | 69 74 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 53 65 65 6b 4d 65 6d 6f 72 79 53 74 72 | iteMemoryStream.RtlSeekMemoryStr |
| aec0 | 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 65 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 | eam.__imp_RtlSeekMemoryStream.Rt |
| aee0 | 6c 53 65 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 | lSetMemoryStreamSize.__imp_RtlSe |
| af00 | 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 53 69 7a 65 00 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 53 | tMemoryStreamSize.RtlCopyMemoryS |
| af20 | 74 72 65 61 6d 54 6f 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 53 74 72 65 61 | treamTo.__imp_RtlCopyMemoryStrea |
| af40 | 6d 54 6f 00 52 74 6c 43 6f 6d 6d 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f | mTo.RtlCommitMemoryStream.__imp_ |
| af60 | 52 74 6c 43 6f 6d 6d 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 52 65 76 65 72 74 4d | RtlCommitMemoryStream.RtlRevertM |
| af80 | 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 76 65 72 74 4d 65 6d 6f 72 | emoryStream.__imp_RtlRevertMemor |
| afa0 | 79 53 74 72 65 61 6d 00 52 74 6c 4c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f | yStream.RtlLockMemoryStreamRegio |
| afc0 | 6e 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f | n.__imp_RtlLockMemoryStreamRegio |
| afe0 | 6e 00 52 74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e 00 5f 5f | n.RtlUnlockMemoryStreamRegion.__ |
| b000 | 69 6d 70 5f 52 74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e 00 | imp_RtlUnlockMemoryStreamRegion. |
| b020 | 52 74 6c 53 74 61 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 53 74 61 | RtlStatMemoryStream.__imp_RtlSta |
| b040 | 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 43 6c 6f 6e 65 4d 65 6d 6f 72 79 53 74 72 65 | tMemoryStream.RtlCloneMemoryStre |
| b060 | 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 43 6c 6f 6e 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 | am.__imp_RtlCloneMemoryStream.Rt |
| b080 | 6c 49 6e 69 74 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f | lInitOutOfProcessMemoryStream.__ |
| b0a0 | 69 6d 70 5f 52 74 6c 49 6e 69 74 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 | imp_RtlInitOutOfProcessMemoryStr |
| b0c0 | 65 61 6d 00 52 74 6c 46 69 6e 61 6c 52 65 6c 65 61 73 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d | eam.RtlFinalReleaseOutOfProcessM |
| b0e0 | 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 61 6c 52 65 6c 65 61 73 | emoryStream.__imp_RtlFinalReleas |
| b100 | 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 52 65 61 | eOutOfProcessMemoryStream.RtlRea |
| b120 | 64 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f | dOutOfProcessMemoryStream.__imp_ |
| b140 | 52 74 6c 52 65 61 64 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 | RtlReadOutOfProcessMemoryStream. |
| b160 | 52 74 6c 43 6f 70 79 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 | RtlCopyOutOfProcessMemoryStreamT |
| b180 | 6f 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 | o.__imp_RtlCopyOutOfProcessMemor |
| b1a0 | 79 53 74 72 65 61 6d 54 6f 00 52 74 6c 43 72 65 61 74 65 53 79 73 74 65 6d 56 6f 6c 75 6d 65 49 | yStreamTo.RtlCreateSystemVolumeI |
| b1c0 | 6e 66 6f 72 6d 61 74 69 6f 6e 46 6f 6c 64 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 | nformationFolder.__imp_RtlCreate |
| b1e0 | 53 79 73 74 65 6d 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 6f 6c 64 65 72 00 4c 64 | SystemVolumeInformationFolder.Ld |
| b200 | 72 43 72 65 61 74 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 00 5f 5f 69 6d 70 5f 4c | rCreateOutOfProcessImage.__imp_L |
| b220 | 64 72 43 72 65 61 74 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 00 4c 64 72 46 69 6e | drCreateOutOfProcessImage.LdrFin |
| b240 | 64 43 72 65 61 74 65 50 72 6f 63 65 73 73 4d 61 6e 69 66 65 73 74 00 5f 5f 69 6d 70 5f 4c 64 72 | dCreateProcessManifest.__imp_Ldr |
| b260 | 46 69 6e 64 43 72 65 61 74 65 50 72 6f 63 65 73 73 4d 61 6e 69 66 65 73 74 00 4c 64 72 41 63 63 | FindCreateProcessManifest.LdrAcc |
| b280 | 65 73 73 4f 75 74 4f 66 50 72 6f 63 65 73 73 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 4c 64 | essOutOfProcessResource.__imp_Ld |
| b2a0 | 72 41 63 63 65 73 73 4f 75 74 4f 66 50 72 6f 63 65 73 73 52 65 73 6f 75 72 63 65 00 4c 64 72 44 | rAccessOutOfProcessResource.LdrD |
| b2c0 | 65 73 74 72 6f 79 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 00 5f 5f 69 6d 70 5f 4c 64 | estroyOutOfProcessImage.__imp_Ld |
| b2e0 | 72 44 65 73 74 72 6f 79 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 00 52 74 6c 4d 75 6c | rDestroyOutOfProcessImage.RtlMul |
| b300 | 74 69 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 42 75 66 66 65 72 00 5f 5f 69 6d | tiAppendUnicodeStringBuffer.__im |
| b320 | 70 5f 52 74 6c 4d 75 6c 74 69 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 42 75 66 | p_RtlMultiAppendUnicodeStringBuf |
| b340 | 66 65 72 00 52 74 6c 70 45 6e 73 75 72 65 42 75 66 66 65 72 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 | fer.RtlpEnsureBufferSize.__imp_R |
| b360 | 74 6c 70 45 6e 73 75 72 65 42 75 66 66 65 72 53 69 7a 65 00 52 74 6c 41 70 70 65 6e 64 50 61 74 | tlpEnsureBufferSize.RtlAppendPat |
| b380 | 68 45 6c 65 6d 65 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 65 6e 64 50 61 74 68 45 6c 65 6d | hElement.__imp_RtlAppendPathElem |
| b3a0 | 65 6e 74 00 52 74 6c 47 65 74 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 4c 61 73 74 46 75 6c 6c 44 | ent.RtlGetLengthWithoutLastFullD |
| b3c0 | 6f 73 4f 72 4e 74 50 61 74 68 45 6c 65 6d 65 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4c 65 | osOrNtPathElement.__imp_RtlGetLe |
| b3e0 | 6e 67 74 68 57 69 74 68 6f 75 74 4c 61 73 74 46 75 6c 6c 44 6f 73 4f 72 4e 74 50 61 74 68 45 6c | ngthWithoutLastFullDosOrNtPathEl |
| b400 | 65 6d 65 6e 74 00 52 74 6c 47 65 74 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 54 72 61 69 6c 69 6e | ement.RtlGetLengthWithoutTrailin |
| b420 | 67 50 61 74 68 53 65 70 65 72 61 74 6f 72 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4c 65 6e 67 | gPathSeperators.__imp_RtlGetLeng |
| b440 | 74 68 57 69 74 68 6f 75 74 54 72 61 69 6c 69 6e 67 50 61 74 68 53 65 70 65 72 61 74 6f 72 73 00 | thWithoutTrailingPathSeperators. |
| b460 | 52 74 6c 70 41 70 70 6c 79 4c 65 6e 67 74 68 46 75 6e 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 | RtlpApplyLengthFunction.__imp_Rt |
| b480 | 6c 70 41 70 70 6c 79 4c 65 6e 67 74 68 46 75 6e 63 74 69 6f 6e 00 52 74 6c 4c 6f 63 6b 42 6f 6f | lpApplyLengthFunction.RtlLockBoo |
| b4a0 | 74 53 74 61 74 75 73 44 61 74 61 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 63 6b 42 6f 6f 74 53 74 61 | tStatusData.__imp_RtlLockBootSta |
| b4c0 | 74 75 73 44 61 74 61 00 52 74 6c 47 65 74 53 65 74 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 | tusData.RtlGetSetBootStatusData. |
| b4e0 | 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 53 65 74 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 52 74 | __imp_RtlGetSetBootStatusData.Rt |
| b500 | 6c 55 6e 6c 6f 63 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 5f 5f 69 6d 70 5f 52 74 6c 55 | lUnlockBootStatusData.__imp_RtlU |
| b520 | 6e 6c 6f 63 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 52 74 6c 43 72 65 61 74 65 42 6f 6f | nlockBootStatusData.RtlCreateBoo |
| b540 | 74 53 74 61 74 75 73 44 61 74 61 46 69 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 42 | tStatusDataFile.__imp_RtlCreateB |
| b560 | 6f 6f 74 53 74 61 74 75 73 44 61 74 61 46 69 6c 65 00 52 74 6c 49 73 54 68 72 65 61 64 57 69 74 | ootStatusDataFile.RtlIsThreadWit |
| b580 | 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c 6f 75 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 54 68 72 65 | hinLoaderCallout.__imp_RtlIsThre |
| b5a0 | 61 64 57 69 74 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c 6f 75 74 00 45 74 77 53 74 61 72 74 54 72 | adWithinLoaderCallout.EtwStartTr |
| b5c0 | 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 77 53 74 61 72 74 54 72 61 63 65 41 00 45 74 77 53 74 61 | aceA.__imp_EtwStartTraceA.EtwSta |
| b5e0 | 72 74 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 53 74 61 72 74 54 72 61 63 65 57 00 45 74 | rtTraceW.__imp_EtwStartTraceW.Et |
| b600 | 77 53 74 6f 70 54 72 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 77 53 74 6f 70 54 72 61 63 65 41 00 | wStopTraceA.__imp_EtwStopTraceA. |
| b620 | 45 74 77 53 74 6f 70 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 53 74 6f 70 54 72 61 63 65 | EtwStopTraceW.__imp_EtwStopTrace |
| b640 | 57 00 45 74 77 51 75 65 72 79 54 72 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 77 51 75 65 72 79 54 | W.EtwQueryTraceA.__imp_EtwQueryT |
| b660 | 72 61 63 65 41 00 45 74 77 51 75 65 72 79 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 51 75 | raceA.EtwQueryTraceW.__imp_EtwQu |
| b680 | 65 72 79 54 72 61 63 65 57 00 45 74 77 55 70 64 61 74 65 54 72 61 63 65 41 00 5f 5f 69 6d 70 5f | eryTraceW.EtwUpdateTraceA.__imp_ |
| b6a0 | 45 74 77 55 70 64 61 74 65 54 72 61 63 65 41 00 45 74 77 55 70 64 61 74 65 54 72 61 63 65 57 00 | EtwUpdateTraceA.EtwUpdateTraceW. |
| b6c0 | 5f 5f 69 6d 70 5f 45 74 77 55 70 64 61 74 65 54 72 61 63 65 57 00 45 74 77 46 6c 75 73 68 54 72 | __imp_EtwUpdateTraceW.EtwFlushTr |
| b6e0 | 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 77 46 6c 75 73 68 54 72 61 63 65 41 00 45 74 77 46 6c 75 | aceA.__imp_EtwFlushTraceA.EtwFlu |
| b700 | 73 68 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 46 6c 75 73 68 54 72 61 63 65 57 00 45 74 | shTraceW.__imp_EtwFlushTraceW.Et |
| b720 | 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 77 43 6f 6e 74 72 6f 6c 54 | wControlTraceA.__imp_EtwControlT |
| b740 | 72 61 63 65 41 00 45 74 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 | raceA.EtwControlTraceW.__imp_Etw |
| b760 | 43 6f 6e 74 72 6f 6c 54 72 61 63 65 57 00 45 74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73 41 | ControlTraceW.EtwQueryAllTracesA |
| b780 | 00 5f 5f 69 6d 70 5f 45 74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73 41 00 45 74 77 51 75 65 | .__imp_EtwQueryAllTracesA.EtwQue |
| b7a0 | 72 79 41 6c 6c 54 72 61 63 65 73 57 00 5f 5f 69 6d 70 5f 45 74 77 51 75 65 72 79 41 6c 6c 54 72 | ryAllTracesW.__imp_EtwQueryAllTr |
| b7c0 | 61 63 65 73 57 00 45 74 77 47 65 74 54 72 61 63 65 4c 6f 67 67 65 72 48 61 6e 64 6c 65 00 5f 5f | acesW.EtwGetTraceLoggerHandle.__ |
| b7e0 | 69 6d 70 5f 45 74 77 47 65 74 54 72 61 63 65 4c 6f 67 67 65 72 48 61 6e 64 6c 65 00 45 74 77 47 | imp_EtwGetTraceLoggerHandle.EtwG |
| b800 | 65 74 54 72 61 63 65 45 6e 61 62 6c 65 4c 65 76 65 6c 00 5f 5f 69 6d 70 5f 45 74 77 47 65 74 54 | etTraceEnableLevel.__imp_EtwGetT |
| b820 | 72 61 63 65 45 6e 61 62 6c 65 4c 65 76 65 6c 00 45 74 77 47 65 74 54 72 61 63 65 45 6e 61 62 6c | raceEnableLevel.EtwGetTraceEnabl |
| b840 | 65 46 6c 61 67 73 00 5f 5f 69 6d 70 5f 45 74 77 47 65 74 54 72 61 63 65 45 6e 61 62 6c 65 46 6c | eFlags.__imp_EtwGetTraceEnableFl |
| b860 | 61 67 73 00 45 74 77 43 72 65 61 74 65 54 72 61 63 65 49 6e 73 74 61 6e 63 65 49 64 00 5f 5f 69 | ags.EtwCreateTraceInstanceId.__i |
| b880 | 6d 70 5f 45 74 77 43 72 65 61 74 65 54 72 61 63 65 49 6e 73 74 61 6e 63 65 49 64 00 45 74 77 45 | mp_EtwCreateTraceInstanceId.EtwE |
| b8a0 | 6e 61 62 6c 65 54 72 61 63 65 00 5f 5f 69 6d 70 5f 45 74 77 45 6e 61 62 6c 65 54 72 61 63 65 00 | nableTrace.__imp_EtwEnableTrace. |
| b8c0 | 45 74 77 45 6e 75 6d 65 72 61 74 65 54 72 61 63 65 47 75 69 64 73 00 5f 5f 69 6d 70 5f 45 74 77 | EtwEnumerateTraceGuids.__imp_Etw |
| b8e0 | 45 6e 75 6d 65 72 61 74 65 54 72 61 63 65 47 75 69 64 73 00 45 74 77 52 65 67 69 73 74 65 72 54 | EnumerateTraceGuids.EtwRegisterT |
| b900 | 72 61 63 65 47 75 69 64 73 41 00 5f 5f 69 6d 70 5f 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 | raceGuidsA.__imp_EtwRegisterTrac |
| b920 | 65 47 75 69 64 73 41 00 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 57 00 5f | eGuidsA.EtwRegisterTraceGuidsW._ |
| b940 | 5f 69 6d 70 5f 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 57 00 45 74 77 54 | _imp_EtwRegisterTraceGuidsW.EtwT |
| b960 | 72 61 63 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 45 74 77 54 72 61 63 65 45 76 65 6e 74 00 45 74 | raceEvent.__imp_EtwTraceEvent.Et |
| b980 | 77 54 72 61 63 65 45 76 65 6e 74 49 6e 73 74 61 6e 63 65 00 5f 5f 69 6d 70 5f 45 74 77 54 72 61 | wTraceEventInstance.__imp_EtwTra |
| b9a0 | 63 65 45 76 65 6e 74 49 6e 73 74 61 6e 63 65 00 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65 00 | ceEventInstance.EtwTraceMessage. |
| b9c0 | 5f 5f 69 6d 70 5f 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65 00 45 74 77 54 72 61 63 65 4d 65 | __imp_EtwTraceMessage.EtwTraceMe |
| b9e0 | 73 73 61 67 65 56 61 00 5f 5f 69 6d 70 5f 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65 56 61 00 | ssageVa.__imp_EtwTraceMessageVa. |
| ba00 | 45 74 77 55 6e 72 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 00 5f 5f 69 6d 70 5f 45 74 | EtwUnregisterTraceGuids.__imp_Et |
| ba20 | 77 55 6e 72 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 00 45 74 77 4e 6f 74 69 66 69 63 | wUnregisterTraceGuids.EtwNotific |
| ba40 | 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 41 00 5f 5f 69 6d 70 5f 45 74 77 4e 6f 74 69 | ationRegistrationA.__imp_EtwNoti |
| ba60 | 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 41 00 45 74 77 4e 6f 74 69 66 69 63 | ficationRegistrationA.EtwNotific |
| ba80 | 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 57 00 5f 5f 69 6d 70 5f 45 74 77 4e 6f 74 69 | ationRegistrationW.__imp_EtwNoti |
| baa0 | 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 57 00 45 74 77 52 65 63 65 69 76 65 | ficationRegistrationW.EtwReceive |
| bac0 | 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 41 00 5f 5f 69 6d 70 5f 45 74 77 52 65 63 65 69 76 65 4e | NotificationsA.__imp_EtwReceiveN |
| bae0 | 6f 74 69 66 69 63 61 74 69 6f 6e 73 41 00 45 74 77 52 65 63 65 69 76 65 4e 6f 74 69 66 69 63 61 | otificationsA.EtwReceiveNotifica |
| bb00 | 74 69 6f 6e 73 57 00 5f 5f 69 6d 70 5f 45 74 77 52 65 63 65 69 76 65 4e 6f 74 69 66 69 63 61 74 | tionsW.__imp_EtwReceiveNotificat |
| bb20 | 69 6f 6e 73 57 00 45 74 77 70 47 65 74 54 72 61 63 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 45 | ionsW.EtwpGetTraceBuffer.__imp_E |
| bb40 | 74 77 70 47 65 74 54 72 61 63 65 42 75 66 66 65 72 00 45 74 77 70 53 65 74 48 57 43 6f 6e 66 69 | twpGetTraceBuffer.EtwpSetHWConfi |
| bb60 | 67 46 75 6e 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 45 74 77 70 53 65 74 48 57 43 6f 6e 66 69 67 46 | gFunction.__imp_EtwpSetHWConfigF |
| bb80 | 75 6e 63 74 69 6f 6e 00 4e 74 47 65 74 54 69 63 6b 43 6f 75 6e 74 00 5f 5f 69 6d 70 5f 4e 74 47 | unction.NtGetTickCount.__imp_NtG |
| bba0 | 65 74 54 69 63 6b 43 6f 75 6e 74 00 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f | etTickCount.RtlCopyMemory.__imp_ |
| bbc0 | 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 00 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 4e 6f 6e 54 65 | RtlCopyMemory.RtlCopyMemoryNonTe |
| bbe0 | 6d 70 6f 72 61 6c 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 4e 6f 6e 54 65 6d | mporal.__imp_RtlCopyMemoryNonTem |
| bc00 | 70 6f 72 61 6c 00 52 74 6c 52 65 73 74 6f 72 65 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 | poral.RtlRestoreContext.__imp_Rt |
| bc20 | 6c 52 65 73 74 6f 72 65 43 6f 6e 74 65 78 74 00 52 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f | lRestoreContext.RtlLookupFunctio |
| bc40 | 6e 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 45 6e | nEntry.__imp_RtlLookupFunctionEn |
| bc60 | 74 72 79 00 52 74 6c 56 69 72 74 75 61 6c 55 6e 77 69 6e 64 00 5f 5f 69 6d 70 5f 52 74 6c 56 69 | try.RtlVirtualUnwind.__imp_RtlVi |
| bc80 | 72 74 75 61 6c 55 6e 77 69 6e 64 00 52 74 6c 55 6e 77 69 6e 64 45 78 00 5f 5f 69 6d 70 5f 52 74 | rtualUnwind.RtlUnwindEx.__imp_Rt |
| bca0 | 6c 55 6e 77 69 6e 64 45 78 00 5f 5f 43 5f 73 70 65 63 69 66 69 63 5f 68 61 6e 64 6c 65 72 00 5f | lUnwindEx.__C_specific_handler._ |
| bcc0 | 5f 69 6d 70 5f 5f 5f 43 5f 73 70 65 63 69 66 69 63 5f 68 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f | _imp___C_specific_handler.__imp_ |
| bce0 | 5f 6c 6f 63 61 6c 5f 75 6e 77 69 6e 64 00 5f 6c 6f 63 61 6c 5f 75 6e 77 69 6e 64 00 52 74 6c 41 | _local_unwind._local_unwind.RtlA |
| bd00 | 64 64 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 46 75 6e 63 | ddFunctionTable.__imp_RtlAddFunc |
| bd20 | 74 69 6f 6e 54 61 62 6c 65 00 52 74 6c 49 6e 73 74 61 6c 6c 46 75 6e 63 74 69 6f 6e 54 61 62 6c | tionTable.RtlInstallFunctionTabl |
| bd40 | 65 43 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 73 74 61 6c 6c 46 75 6e 63 74 69 | eCallback.__imp_RtlInstallFuncti |
| bd60 | 6f 6e 54 61 62 6c 65 43 61 6c 6c 62 61 63 6b 00 52 74 6c 44 65 6c 65 74 65 46 75 6e 63 74 69 6f | onTableCallback.RtlDeleteFunctio |
| bd80 | 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 46 75 6e 63 74 69 6f 6e 54 61 | nTable.__imp_RtlDeleteFunctionTa |
| bda0 | 62 6c 65 00 52 74 6c 47 65 74 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 4c 69 73 74 48 65 61 64 00 | ble.RtlGetFunctionTableListHead. |
| bdc0 | 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 4c 69 73 74 48 65 61 | __imp_RtlGetFunctionTableListHea |
| bde0 | 64 00 52 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 | d.RtlLookupFunctionTable.__imp_R |
| be00 | 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 63 68 6b 73 74 6b 00 5f | tlLookupFunctionTable.__chkstk._ |
| be20 | 5f 69 6d 70 5f 5f 5f 63 68 6b 73 74 6b 00 5f 5f 69 6d 70 5f 5f 5f 6d 69 73 61 6c 69 67 6e 65 64 | _imp___chkstk.__imp___misaligned |
| be40 | 5f 61 63 63 65 73 73 00 5f 5f 6d 69 73 61 6c 69 67 6e 65 64 5f 61 63 63 65 73 73 00 5f 5f 69 6d | _access.__misaligned_access.__im |
| be60 | 70 5f 5f 73 65 74 6a 6d 70 00 5f 73 65 74 6a 6d 70 00 5f 5f 69 6d 70 5f 5f 73 65 74 6a 6d 70 65 | p__setjmp._setjmp.__imp__setjmpe |
| be80 | 78 00 5f 73 65 74 6a 6d 70 65 78 00 5f 5f 69 6d 70 5f 6c 6f 6e 67 6a 6d 70 00 6c 6f 6e 67 6a 6d | x._setjmpex.__imp_longjmp.longjm |
| bea0 | 70 00 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74 65 72 00 | p.ZwMapUserPhysicalPagesScatter. |
| bec0 | 5f 5f 69 6d 70 5f 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 | __imp_ZwMapUserPhysicalPagesScat |
| bee0 | 74 65 72 00 4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74 65 | ter.NtMapUserPhysicalPagesScatte |
| bf00 | 72 00 5f 5f 69 6d 70 5f 4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 | r.__imp_NtMapUserPhysicalPagesSc |
| bf20 | 61 74 74 65 72 00 5a 77 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 5f 5f 69 6d | atter.ZwWaitForSingleObject.__im |
| bf40 | 70 5f 5a 77 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 4e 74 57 61 69 74 46 6f | p_ZwWaitForSingleObject.NtWaitFo |
| bf60 | 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 53 69 6e | rSingleObject.__imp_NtWaitForSin |
| bf80 | 67 6c 65 4f 62 6a 65 63 74 00 5a 77 43 61 6c 6c 62 61 63 6b 52 65 74 75 72 6e 00 5f 5f 69 6d 70 | gleObject.ZwCallbackReturn.__imp |
| bfa0 | 5f 5a 77 43 61 6c 6c 62 61 63 6b 52 65 74 75 72 6e 00 4e 74 43 61 6c 6c 62 61 63 6b 52 65 74 75 | _ZwCallbackReturn.NtCallbackRetu |
| bfc0 | 72 6e 00 5f 5f 69 6d 70 5f 4e 74 43 61 6c 6c 62 61 63 6b 52 65 74 75 72 6e 00 5a 77 52 65 61 64 | rn.__imp_NtCallbackReturn.ZwRead |
| bfe0 | 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 52 65 61 64 46 69 6c 65 00 4e 74 52 65 61 64 46 69 6c 65 | File.__imp_ZwReadFile.NtReadFile |
| c000 | 00 5f 5f 69 6d 70 5f 4e 74 52 65 61 64 46 69 6c 65 00 5a 77 44 65 76 69 63 65 49 6f 43 6f 6e 74 | .__imp_NtReadFile.ZwDeviceIoCont |
| c020 | 72 6f 6c 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 44 65 76 69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 | rolFile.__imp_ZwDeviceIoControlF |
| c040 | 69 6c 65 00 4e 74 44 65 76 69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 5f 5f 69 6d 70 5f | ile.NtDeviceIoControlFile.__imp_ |
| c060 | 4e 74 44 65 76 69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 5a 77 57 72 69 74 65 46 69 6c | NtDeviceIoControlFile.ZwWriteFil |
| c080 | 65 00 5f 5f 69 6d 70 5f 5a 77 57 72 69 74 65 46 69 6c 65 00 4e 74 57 72 69 74 65 46 69 6c 65 00 | e.__imp_ZwWriteFile.NtWriteFile. |
| c0a0 | 5f 5f 69 6d 70 5f 4e 74 57 72 69 74 65 46 69 6c 65 00 5a 77 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 | __imp_NtWriteFile.ZwRemoveIoComp |
| c0c0 | 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c 65 74 69 6f | letion.__imp_ZwRemoveIoCompletio |
| c0e0 | 6e 00 4e 74 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 52 | n.NtRemoveIoCompletion.__imp_NtR |
| c100 | 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 52 65 6c 65 61 73 65 53 65 6d 61 70 | emoveIoCompletion.ZwReleaseSemap |
| c120 | 68 6f 72 65 00 5f 5f 69 6d 70 5f 5a 77 52 65 6c 65 61 73 65 53 65 6d 61 70 68 6f 72 65 00 4e 74 | hore.__imp_ZwReleaseSemaphore.Nt |
| c140 | 52 65 6c 65 61 73 65 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f 4e 74 52 65 6c 65 61 73 65 | ReleaseSemaphore.__imp_NtRelease |
| c160 | 53 65 6d 61 70 68 6f 72 65 00 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 | Semaphore.ZwReplyWaitReceivePort |
| c180 | 00 5f 5f 69 6d 70 5f 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 00 4e 74 | .__imp_ZwReplyWaitReceivePort.Nt |
| c1a0 | 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 70 | ReplyWaitReceivePort.__imp_NtRep |
| c1c0 | 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 00 5a 77 52 65 70 6c 79 50 6f 72 74 00 5f 5f | lyWaitReceivePort.ZwReplyPort.__ |
| c1e0 | 69 6d 70 5f 5a 77 52 65 70 6c 79 50 6f 72 74 00 4e 74 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 6d | imp_ZwReplyPort.NtReplyPort.__im |
| c200 | 70 5f 4e 74 52 65 70 6c 79 50 6f 72 74 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 | p_NtReplyPort.ZwSetInformationTh |
| c220 | 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 | read.__imp_ZwSetInformationThrea |
| c240 | 64 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e | d.NtSetInformationThread.__imp_N |
| c260 | 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5a 77 53 65 74 45 76 65 6e 74 | tSetInformationThread.ZwSetEvent |
| c280 | 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 45 76 65 6e 74 00 4e 74 53 65 74 45 76 65 6e 74 00 5f 5f 69 | .__imp_ZwSetEvent.NtSetEvent.__i |
| c2a0 | 6d 70 5f 4e 74 53 65 74 45 76 65 6e 74 00 5a 77 43 6c 6f 73 65 00 5f 5f 69 6d 70 5f 5a 77 43 6c | mp_NtSetEvent.ZwClose.__imp_ZwCl |
| c2c0 | 6f 73 65 00 4e 74 43 6c 6f 73 65 00 5f 5f 69 6d 70 5f 4e 74 43 6c 6f 73 65 00 5a 77 51 75 65 72 | ose.NtClose.__imp_NtClose.ZwQuer |
| c2e0 | 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 4f 62 6a 65 63 74 00 4e 74 51 75 | yObject.__imp_ZwQueryObject.NtQu |
| c300 | 65 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4f 62 6a 65 63 74 00 5a 77 | eryObject.__imp_NtQueryObject.Zw |
| c320 | 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 | QueryInformationFile.__imp_ZwQue |
| c340 | 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 | ryInformationFile.NtQueryInforma |
| c360 | 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f | tionFile.__imp_NtQueryInformatio |
| c380 | 6e 46 69 6c 65 00 5a 77 4f 70 65 6e 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 4b 65 79 00 | nFile.ZwOpenKey.__imp_ZwOpenKey. |
| c3a0 | 4e 74 4f 70 65 6e 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 4b 65 79 00 5a 77 45 6e 75 6d | NtOpenKey.__imp_NtOpenKey.ZwEnum |
| c3c0 | 65 72 61 74 65 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 45 6e 75 6d 65 72 61 74 65 56 | erateValueKey.__imp_ZwEnumerateV |
| c3e0 | 61 6c 75 65 4b 65 79 00 4e 74 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d | alueKey.NtEnumerateValueKey.__im |
| c400 | 70 5f 4e 74 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b 65 79 00 5a 77 46 69 6e 64 41 74 6f 6d | p_NtEnumerateValueKey.ZwFindAtom |
| c420 | 00 5f 5f 69 6d 70 5f 5a 77 46 69 6e 64 41 74 6f 6d 00 4e 74 46 69 6e 64 41 74 6f 6d 00 5f 5f 69 | .__imp_ZwFindAtom.NtFindAtom.__i |
| c440 | 6d 70 5f 4e 74 46 69 6e 64 41 74 6f 6d 00 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 | mp_NtFindAtom.ZwQueryDefaultLoca |
| c460 | 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 4e 74 | le.__imp_ZwQueryDefaultLocale.Nt |
| c480 | 51 75 65 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 | QueryDefaultLocale.__imp_NtQuery |
| c4a0 | 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5a 77 51 75 65 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 5a | DefaultLocale.ZwQueryKey.__imp_Z |
| c4c0 | 77 51 75 65 72 79 4b 65 79 00 4e 74 51 75 65 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 | wQueryKey.NtQueryKey.__imp_NtQue |
| c4e0 | 72 79 4b 65 79 00 5a 77 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 51 75 | ryKey.ZwQueryValueKey.__imp_ZwQu |
| c500 | 65 72 79 56 61 6c 75 65 4b 65 79 00 4e 74 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d | eryValueKey.NtQueryValueKey.__im |
| c520 | 70 5f 4e 74 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 5a 77 41 6c 6c 6f 63 61 74 65 56 69 72 74 | p_NtQueryValueKey.ZwAllocateVirt |
| c540 | 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 | ualMemory.__imp_ZwAllocateVirtua |
| c560 | 6c 4d 65 6d 6f 72 79 00 4e 74 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 | lMemory.NtAllocateVirtualMemory. |
| c580 | 5f 5f 69 6d 70 5f 4e 74 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 | __imp_NtAllocateVirtualMemory.Zw |
| c5a0 | 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 | QueryInformationProcess.__imp_Zw |
| c5c0 | 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 4e 74 51 75 65 72 79 49 | QueryInformationProcess.NtQueryI |
| c5e0 | 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 | nformationProcess.__imp_NtQueryI |
| c600 | 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74 69 | nformationProcess.ZwWaitForMulti |
| c620 | 70 6c 65 4f 62 6a 65 63 74 73 33 32 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74 | pleObjects32.__imp_ZwWaitForMult |
| c640 | 69 70 6c 65 4f 62 6a 65 63 74 73 33 32 00 4e 74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f | ipleObjects32.NtWaitForMultipleO |
| c660 | 62 6a 65 63 74 73 33 32 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 | bjects32.__imp_NtWaitForMultiple |
| c680 | 4f 62 6a 65 63 74 73 33 32 00 5a 77 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 5f 5f 69 6d | Objects32.ZwWriteFileGather.__im |
| c6a0 | 70 5f 5a 77 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 4e 74 57 72 69 74 65 46 69 6c 65 47 | p_ZwWriteFileGather.NtWriteFileG |
| c6c0 | 61 74 68 65 72 00 5f 5f 69 6d 70 5f 4e 74 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 5a 77 | ather.__imp_NtWriteFileGather.Zw |
| c6e0 | 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 53 65 | SetInformationProcess.__imp_ZwSe |
| c700 | 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 | tInformationProcess.NtSetInforma |
| c720 | 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 | tionProcess.__imp_NtSetInformati |
| c740 | 6f 6e 50 72 6f 63 65 73 73 00 5a 77 43 72 65 61 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 43 72 | onProcess.ZwCreateKey.__imp_ZwCr |
| c760 | 65 61 74 65 4b 65 79 00 4e 74 43 72 65 61 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 | eateKey.NtCreateKey.__imp_NtCrea |
| c780 | 74 65 4b 65 79 00 5a 77 46 72 65 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f | teKey.ZwFreeVirtualMemory.__imp_ |
| c7a0 | 5a 77 46 72 65 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 46 72 65 65 56 69 72 74 75 61 | ZwFreeVirtualMemory.NtFreeVirtua |
| c7c0 | 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 46 72 65 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 | lMemory.__imp_NtFreeVirtualMemor |
| c7e0 | 79 00 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 00 5f 5f 69 6d | y.ZwImpersonateClientOfPort.__im |
| c800 | 70 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 00 4e 74 49 6d | p_ZwImpersonateClientOfPort.NtIm |
| c820 | 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 49 6d | personateClientOfPort.__imp_NtIm |
| c840 | 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 00 5a 77 52 65 6c 65 61 73 65 4d | personateClientOfPort.ZwReleaseM |
| c860 | 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 6c 65 61 73 65 4d 75 74 61 6e 74 00 4e 74 52 65 | utant.__imp_ZwReleaseMutant.NtRe |
| c880 | 6c 65 61 73 65 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 6c 65 61 73 65 4d 75 74 61 6e | leaseMutant.__imp_NtReleaseMutan |
| c8a0 | 74 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f | t.ZwQueryInformationToken.__imp_ |
| c8c0 | 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 4e 74 51 75 65 72 79 49 | ZwQueryInformationToken.NtQueryI |
| c8e0 | 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 | nformationToken.__imp_NtQueryInf |
| c900 | 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 5a 77 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 | ormationToken.ZwRequestWaitReply |
| c920 | 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 | Port.__imp_ZwRequestWaitReplyPor |
| c940 | 74 00 4e 74 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e | t.NtRequestWaitReplyPort.__imp_N |
| c960 | 74 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 5a 77 51 75 65 72 79 56 69 72 | tRequestWaitReplyPort.ZwQueryVir |
| c980 | 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 56 69 72 74 75 61 6c 4d | tualMemory.__imp_ZwQueryVirtualM |
| c9a0 | 65 6d 6f 72 79 00 4e 74 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 | emory.NtQueryVirtualMemory.__imp |
| c9c0 | 5f 4e 74 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 4f 70 65 6e 54 68 72 65 | _NtQueryVirtualMemory.ZwOpenThre |
| c9e0 | 61 64 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 00 | adToken.__imp_ZwOpenThreadToken. |
| ca00 | 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 54 68 | NtOpenThreadToken.__imp_NtOpenTh |
| ca20 | 72 65 61 64 54 6f 6b 65 6e 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 | readToken.ZwQueryInformationThre |
| ca40 | 61 64 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 | ad.__imp_ZwQueryInformationThrea |
| ca60 | 64 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 | d.NtQueryInformationThread.__imp |
| ca80 | 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5a 77 4f 70 65 6e | _NtQueryInformationThread.ZwOpen |
| caa0 | 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 00 4e 74 4f 70 | Process.__imp_ZwOpenProcess.NtOp |
| cac0 | 65 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 00 5a 77 | enProcess.__imp_NtOpenProcess.Zw |
| cae0 | 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e | SetInformationFile.__imp_ZwSetIn |
| cb00 | 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 | formationFile.NtSetInformationFi |
| cb20 | 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 | le.__imp_NtSetInformationFile.Zw |
| cb40 | 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 4d 61 70 56 69 65 77 | MapViewOfSection.__imp_ZwMapView |
| cb60 | 4f 66 53 65 63 74 69 6f 6e 00 4e 74 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5f 5f 69 | OfSection.NtMapViewOfSection.__i |
| cb80 | 6d 70 5f 4e 74 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5a 77 41 63 63 65 73 73 43 68 | mp_NtMapViewOfSection.ZwAccessCh |
| cba0 | 65 63 6b 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 | eckAndAuditAlarm.__imp_ZwAccessC |
| cbc0 | 68 65 63 6b 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 41 | heckAndAuditAlarm.NtAccessCheckA |
| cbe0 | 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b | ndAuditAlarm.__imp_NtAccessCheck |
| cc00 | 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 55 6e 6d 61 70 56 69 65 77 4f 66 53 65 63 74 69 | AndAuditAlarm.ZwUnmapViewOfSecti |
| cc20 | 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 4e 74 | on.__imp_ZwUnmapViewOfSection.Nt |
| cc40 | 55 6e 6d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6d 61 70 | UnmapViewOfSection.__imp_NtUnmap |
| cc60 | 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 | ViewOfSection.ZwReplyWaitReceive |
| cc80 | 50 6f 72 74 45 78 00 5f 5f 69 6d 70 5f 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 | PortEx.__imp_ZwReplyWaitReceiveP |
| cca0 | 6f 72 74 45 78 00 4e 74 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78 00 5f | ortEx.NtReplyWaitReceivePortEx._ |
| ccc0 | 5f 69 6d 70 5f 4e 74 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78 00 5a 77 | _imp_NtReplyWaitReceivePortEx.Zw |
| cce0 | 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 54 65 72 6d 69 6e 61 | TerminateProcess.__imp_ZwTermina |
| cd00 | 74 65 50 72 6f 63 65 73 73 00 4e 74 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 5f 5f 69 | teProcess.NtTerminateProcess.__i |
| cd20 | 6d 70 5f 4e 74 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 5a 77 53 65 74 45 76 65 6e 74 | mp_NtTerminateProcess.ZwSetEvent |
| cd40 | 42 6f 6f 73 74 50 72 69 6f 72 69 74 79 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 45 76 65 6e 74 42 6f | BoostPriority.__imp_ZwSetEventBo |
| cd60 | 6f 73 74 50 72 69 6f 72 69 74 79 00 4e 74 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 6f 72 | ostPriority.NtSetEventBoostPrior |
| cd80 | 69 74 79 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 6f 72 69 74 | ity.__imp_NtSetEventBoostPriorit |
| cda0 | 79 00 5a 77 52 65 61 64 46 69 6c 65 53 63 61 74 74 65 72 00 5f 5f 69 6d 70 5f 5a 77 52 65 61 64 | y.ZwReadFileScatter.__imp_ZwRead |
| cdc0 | 46 69 6c 65 53 63 61 74 74 65 72 00 4e 74 52 65 61 64 46 69 6c 65 53 63 61 74 74 65 72 00 5f 5f | FileScatter.NtReadFileScatter.__ |
| cde0 | 69 6d 70 5f 4e 74 52 65 61 64 46 69 6c 65 53 63 61 74 74 65 72 00 5a 77 4f 70 65 6e 54 68 72 65 | imp_NtReadFileScatter.ZwOpenThre |
| ce00 | 61 64 54 6f 6b 65 6e 45 78 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 | adTokenEx.__imp_ZwOpenThreadToke |
| ce20 | 6e 45 78 00 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 45 78 00 5f 5f 69 6d 70 5f 4e 74 | nEx.NtOpenThreadTokenEx.__imp_Nt |
| ce40 | 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 45 78 00 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 | OpenThreadTokenEx.ZwOpenProcessT |
| ce60 | 6f 6b 65 6e 45 78 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 | okenEx.__imp_ZwOpenProcessTokenE |
| ce80 | 78 00 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 00 5f 5f 69 6d 70 5f 4e 74 4f | x.NtOpenProcessTokenEx.__imp_NtO |
| cea0 | 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 00 5a 77 51 75 65 72 79 50 65 72 66 6f 72 6d | penProcessTokenEx.ZwQueryPerform |
| cec0 | 61 6e 63 65 43 6f 75 6e 74 65 72 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 50 65 72 66 6f 72 6d | anceCounter.__imp_ZwQueryPerform |
| cee0 | 61 6e 63 65 43 6f 75 6e 74 65 72 00 4e 74 51 75 65 72 79 50 65 72 66 6f 72 6d 61 6e 63 65 43 6f | anceCounter.NtQueryPerformanceCo |
| cf00 | 75 6e 74 65 72 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 50 65 72 66 6f 72 6d 61 6e 63 65 43 6f | unter.__imp_NtQueryPerformanceCo |
| cf20 | 75 6e 74 65 72 00 5a 77 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 45 6e 75 | unter.ZwEnumerateKey.__imp_ZwEnu |
| cf40 | 6d 65 72 61 74 65 4b 65 79 00 4e 74 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e | merateKey.NtEnumerateKey.__imp_N |
| cf60 | 74 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 5a 77 4f 70 65 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a | tEnumerateKey.ZwOpenFile.__imp_Z |
| cf80 | 77 4f 70 65 6e 46 69 6c 65 00 4e 74 4f 70 65 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 | wOpenFile.NtOpenFile.__imp_NtOpe |
| cfa0 | 6e 46 69 6c 65 00 5a 77 44 65 6c 61 79 45 78 65 63 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 44 | nFile.ZwDelayExecution.__imp_ZwD |
| cfc0 | 65 6c 61 79 45 78 65 63 75 74 69 6f 6e 00 4e 74 44 65 6c 61 79 45 78 65 63 75 74 69 6f 6e 00 5f | elayExecution.NtDelayExecution._ |
| cfe0 | 5f 69 6d 70 5f 4e 74 44 65 6c 61 79 45 78 65 63 75 74 69 6f 6e 00 5a 77 51 75 65 72 79 44 69 72 | _imp_NtDelayExecution.ZwQueryDir |
| d000 | 65 63 74 6f 72 79 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 44 69 72 65 63 74 6f 72 | ectoryFile.__imp_ZwQueryDirector |
| d020 | 79 46 69 6c 65 00 4e 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5f 5f 69 6d 70 | yFile.NtQueryDirectoryFile.__imp |
| d040 | 5f 4e 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5a 77 51 75 65 72 79 53 79 73 | _NtQueryDirectoryFile.ZwQuerySys |
| d060 | 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 73 74 | temInformation.__imp_ZwQuerySyst |
| d080 | 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4e 74 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 | emInformation.NtQuerySystemInfor |
| d0a0 | 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d | mation.__imp_NtQuerySystemInform |
| d0c0 | 61 74 69 6f 6e 00 5a 77 4f 70 65 6e 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e | ation.ZwOpenSection.__imp_ZwOpen |
| d0e0 | 53 65 63 74 69 6f 6e 00 4e 74 4f 70 65 6e 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 4f 70 | Section.NtOpenSection.__imp_NtOp |
| d100 | 65 6e 53 65 63 74 69 6f 6e 00 5a 77 51 75 65 72 79 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 51 | enSection.ZwQueryTimer.__imp_ZwQ |
| d120 | 75 65 72 79 54 69 6d 65 72 00 4e 74 51 75 65 72 79 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 51 | ueryTimer.NtQueryTimer.__imp_NtQ |
| d140 | 75 65 72 79 54 69 6d 65 72 00 5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 5f 5f 69 6d 70 5f | ueryTimer.ZwFsControlFile.__imp_ |
| d160 | 5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 4e 74 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 | ZwFsControlFile.NtFsControlFile. |
| d180 | 5f 5f 69 6d 70 5f 4e 74 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 5a 77 57 72 69 74 65 56 69 72 | __imp_NtFsControlFile.ZwWriteVir |
| d1a0 | 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 57 72 69 74 65 56 69 72 74 75 61 6c 4d | tualMemory.__imp_ZwWriteVirtualM |
| d1c0 | 65 6d 6f 72 79 00 4e 74 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 | emory.NtWriteVirtualMemory.__imp |
| d1e0 | 5f 4e 74 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 43 6c 6f 73 65 4f 62 6a | _NtWriteVirtualMemory.ZwCloseObj |
| d200 | 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 43 6c 6f 73 65 4f 62 6a 65 63 | ectAuditAlarm.__imp_ZwCloseObjec |
| d220 | 74 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 43 6c 6f 73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c | tAuditAlarm.NtCloseObjectAuditAl |
| d240 | 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 43 6c 6f 73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 | arm.__imp_NtCloseObjectAuditAlar |
| d260 | 6d 00 5a 77 44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 44 75 70 6c | m.ZwDuplicateObject.__imp_ZwDupl |
| d280 | 69 63 61 74 65 4f 62 6a 65 63 74 00 4e 74 44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 00 5f 5f | icateObject.NtDuplicateObject.__ |
| d2a0 | 69 6d 70 5f 4e 74 44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 00 5a 77 51 75 65 72 79 41 74 74 | imp_NtDuplicateObject.ZwQueryAtt |
| d2c0 | 72 69 62 75 74 65 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 41 74 74 72 69 62 75 | ributesFile.__imp_ZwQueryAttribu |
| d2e0 | 74 65 73 46 69 6c 65 00 4e 74 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 5f 5f | tesFile.NtQueryAttributesFile.__ |
| d300 | 69 6d 70 5f 4e 74 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 5a 77 43 6c 65 61 | imp_NtQueryAttributesFile.ZwClea |
| d320 | 72 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 43 6c 65 61 72 45 76 65 6e 74 00 4e 74 43 6c 65 61 | rEvent.__imp_ZwClearEvent.NtClea |
| d340 | 72 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 43 6c 65 61 72 45 76 65 6e 74 00 5a 77 52 65 61 64 | rEvent.__imp_NtClearEvent.ZwRead |
| d360 | 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 52 65 61 64 56 69 72 74 75 61 | VirtualMemory.__imp_ZwReadVirtua |
| d380 | 6c 4d 65 6d 6f 72 79 00 4e 74 52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d | lMemory.NtReadVirtualMemory.__im |
| d3a0 | 70 5f 4e 74 52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 4f 70 65 6e 45 76 65 6e | p_NtReadVirtualMemory.ZwOpenEven |
| d3c0 | 74 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 45 76 65 6e 74 00 4e 74 4f 70 65 6e 45 76 65 6e 74 00 | t.__imp_ZwOpenEvent.NtOpenEvent. |
| d3e0 | 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 45 76 65 6e 74 00 5a 77 41 64 6a 75 73 74 50 72 69 76 69 6c | __imp_NtOpenEvent.ZwAdjustPrivil |
| d400 | 65 67 65 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 | egesToken.__imp_ZwAdjustPrivileg |
| d420 | 65 73 54 6f 6b 65 6e 00 4e 74 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 | esToken.NtAdjustPrivilegesToken. |
| d440 | 5f 5f 69 6d 70 5f 4e 74 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 5a 77 | __imp_NtAdjustPrivilegesToken.Zw |
| d460 | 44 75 70 6c 69 63 61 74 65 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 44 75 70 6c 69 63 61 74 65 | DuplicateToken.__imp_ZwDuplicate |
| d480 | 54 6f 6b 65 6e 00 4e 74 44 75 70 6c 69 63 61 74 65 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 44 | Token.NtDuplicateToken.__imp_NtD |
| d4a0 | 75 70 6c 69 63 61 74 65 54 6f 6b 65 6e 00 5a 77 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 5a | uplicateToken.ZwContinue.__imp_Z |
| d4c0 | 77 43 6f 6e 74 69 6e 75 65 00 4e 74 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6e | wContinue.NtContinue.__imp_NtCon |
| d4e0 | 74 69 6e 75 65 00 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5f | tinue.ZwQueryDefaultUILanguage._ |
| d500 | 5f 69 6d 70 5f 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 4e 74 | _imp_ZwQueryDefaultUILanguage.Nt |
| d520 | 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 4e 74 51 | QueryDefaultUILanguage.__imp_NtQ |
| d540 | 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5a 77 51 75 65 75 65 41 70 63 | ueryDefaultUILanguage.ZwQueueApc |
| d560 | 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 75 65 41 70 63 54 68 72 65 61 64 00 4e 74 | Thread.__imp_ZwQueueApcThread.Nt |
| d580 | 51 75 65 75 65 41 70 63 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 75 65 41 70 63 54 | QueueApcThread.__imp_NtQueueApcT |
| d5a0 | 68 72 65 61 64 00 5a 77 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 59 | hread.ZwYieldExecution.__imp_ZwY |
| d5c0 | 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 00 4e 74 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 00 5f | ieldExecution.NtYieldExecution._ |
| d5e0 | 5f 69 6d 70 5f 4e 74 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 00 5a 77 41 64 64 41 74 6f 6d 00 | _imp_NtYieldExecution.ZwAddAtom. |
| d600 | 5f 5f 69 6d 70 5f 5a 77 41 64 64 41 74 6f 6d 00 4e 74 41 64 64 41 74 6f 6d 00 5f 5f 69 6d 70 5f | __imp_ZwAddAtom.NtAddAtom.__imp_ |
| d620 | 4e 74 41 64 64 41 74 6f 6d 00 5a 77 43 72 65 61 74 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 | NtAddAtom.ZwCreateEvent.__imp_Zw |
| d640 | 43 72 65 61 74 65 45 76 65 6e 74 00 4e 74 43 72 65 61 74 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f | CreateEvent.NtCreateEvent.__imp_ |
| d660 | 4e 74 43 72 65 61 74 65 45 76 65 6e 74 00 5a 77 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 | NtCreateEvent.ZwQueryVolumeInfor |
| d680 | 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e | mationFile.__imp_ZwQueryVolumeIn |
| d6a0 | 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 4e 74 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 | formationFile.NtQueryVolumeInfor |
| d6c0 | 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e | mationFile.__imp_NtQueryVolumeIn |
| d6e0 | 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 43 72 65 61 74 65 53 65 63 74 69 6f 6e 00 5f 5f | formationFile.ZwCreateSection.__ |
| d700 | 69 6d 70 5f 5a 77 43 72 65 61 74 65 53 65 63 74 69 6f 6e 00 4e 74 43 72 65 61 74 65 53 65 63 74 | imp_ZwCreateSection.NtCreateSect |
| d720 | 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 53 65 63 74 69 6f 6e 00 5a 77 46 6c 75 73 | ion.__imp_NtCreateSection.ZwFlus |
| d740 | 68 42 75 66 66 65 72 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 46 6c 75 73 68 42 75 66 66 65 72 | hBuffersFile.__imp_ZwFlushBuffer |
| d760 | 73 46 69 6c 65 00 4e 74 46 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e | sFile.NtFlushBuffersFile.__imp_N |
| d780 | 74 46 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65 00 5a 77 41 70 70 68 65 6c 70 43 61 63 68 65 | tFlushBuffersFile.ZwApphelpCache |
| d7a0 | 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 5a 77 41 70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e 74 | Control.__imp_ZwApphelpCacheCont |
| d7c0 | 72 6f 6c 00 4e 74 41 70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f | rol.NtApphelpCacheControl.__imp_ |
| d7e0 | 4e 74 41 70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 00 5a 77 43 72 65 61 74 65 50 72 | NtApphelpCacheControl.ZwCreatePr |
| d800 | 6f 63 65 73 73 45 78 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 78 00 | ocessEx.__imp_ZwCreateProcessEx. |
| d820 | 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 78 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 | NtCreateProcessEx.__imp_NtCreate |
| d840 | 50 72 6f 63 65 73 73 45 78 00 5a 77 43 72 65 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a | ProcessEx.ZwCreateThread.__imp_Z |
| d860 | 77 43 72 65 61 74 65 54 68 72 65 61 64 00 4e 74 43 72 65 61 74 65 54 68 72 65 61 64 00 5f 5f 69 | wCreateThread.NtCreateThread.__i |
| d880 | 6d 70 5f 4e 74 43 72 65 61 74 65 54 68 72 65 61 64 00 5a 77 49 73 50 72 6f 63 65 73 73 49 6e 4a | mp_NtCreateThread.ZwIsProcessInJ |
| d8a0 | 6f 62 00 5f 5f 69 6d 70 5f 5a 77 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f 62 00 4e 74 49 73 50 72 | ob.__imp_ZwIsProcessInJob.NtIsPr |
| d8c0 | 6f 63 65 73 73 49 6e 4a 6f 62 00 5f 5f 69 6d 70 5f 4e 74 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f | ocessInJob.__imp_NtIsProcessInJo |
| d8e0 | 62 00 5a 77 50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a | b.ZwProtectVirtualMemory.__imp_Z |
| d900 | 77 50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 50 72 6f 74 65 63 74 56 | wProtectVirtualMemory.NtProtectV |
| d920 | 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 50 72 6f 74 65 63 74 56 69 72 74 | irtualMemory.__imp_NtProtectVirt |
| d940 | 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 51 75 65 72 79 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a | ualMemory.ZwQuerySection.__imp_Z |
| d960 | 77 51 75 65 72 79 53 65 63 74 69 6f 6e 00 4e 74 51 75 65 72 79 53 65 63 74 69 6f 6e 00 5f 5f 69 | wQuerySection.NtQuerySection.__i |
| d980 | 6d 70 5f 4e 74 51 75 65 72 79 53 65 63 74 69 6f 6e 00 5a 77 52 65 73 75 6d 65 54 68 72 65 61 64 | mp_NtQuerySection.ZwResumeThread |
| d9a0 | 00 5f 5f 69 6d 70 5f 5a 77 52 65 73 75 6d 65 54 68 72 65 61 64 00 4e 74 52 65 73 75 6d 65 54 68 | .__imp_ZwResumeThread.NtResumeTh |
| d9c0 | 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 52 65 73 75 6d 65 54 68 72 65 61 64 00 5a 77 54 65 72 6d | read.__imp_NtResumeThread.ZwTerm |
| d9e0 | 69 6e 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 54 65 72 6d 69 6e 61 74 65 54 68 72 | inateThread.__imp_ZwTerminateThr |
| da00 | 65 61 64 00 4e 74 54 65 72 6d 69 6e 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 54 65 | ead.NtTerminateThread.__imp_NtTe |
| da20 | 72 6d 69 6e 61 74 65 54 68 72 65 61 64 00 5a 77 52 65 61 64 52 65 71 75 65 73 74 44 61 74 61 00 | rminateThread.ZwReadRequestData. |
| da40 | 5f 5f 69 6d 70 5f 5a 77 52 65 61 64 52 65 71 75 65 73 74 44 61 74 61 00 4e 74 52 65 61 64 52 65 | __imp_ZwReadRequestData.NtReadRe |
| da60 | 71 75 65 73 74 44 61 74 61 00 5f 5f 69 6d 70 5f 4e 74 52 65 61 64 52 65 71 75 65 73 74 44 61 74 | questData.__imp_NtReadRequestDat |
| da80 | 61 00 5a 77 43 72 65 61 74 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 46 69 6c | a.ZwCreateFile.__imp_ZwCreateFil |
| daa0 | 65 00 4e 74 43 72 65 61 74 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 46 69 6c | e.NtCreateFile.__imp_NtCreateFil |
| dac0 | 65 00 5a 77 51 75 65 72 79 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 45 76 65 6e | e.ZwQueryEvent.__imp_ZwQueryEven |
| dae0 | 74 00 4e 74 51 75 65 72 79 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 45 76 65 6e | t.NtQueryEvent.__imp_NtQueryEven |
| db00 | 74 00 5a 77 57 72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 00 5f 5f 69 6d 70 5f 5a 77 57 72 69 | t.ZwWriteRequestData.__imp_ZwWri |
| db20 | 74 65 52 65 71 75 65 73 74 44 61 74 61 00 4e 74 57 72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 | teRequestData.NtWriteRequestData |
| db40 | 00 5f 5f 69 6d 70 5f 4e 74 57 72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 00 5a 77 4f 70 65 6e | .__imp_NtWriteRequestData.ZwOpen |
| db60 | 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 44 69 72 65 | DirectoryObject.__imp_ZwOpenDire |
| db80 | 63 74 6f 72 79 4f 62 6a 65 63 74 00 4e 74 4f 70 65 6e 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 | ctoryObject.NtOpenDirectoryObjec |
| dba0 | 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5a 77 | t.__imp_NtOpenDirectoryObject.Zw |
| dbc0 | 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5f | AccessCheckByTypeAndAuditAlarm._ |
| dbe0 | 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 41 6e 64 41 75 64 69 74 | _imp_ZwAccessCheckByTypeAndAudit |
| dc00 | 41 6c 61 72 6d 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 41 6e 64 41 75 64 69 | Alarm.NtAccessCheckByTypeAndAudi |
| dc20 | 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 | tAlarm.__imp_NtAccessCheckByType |
| dc40 | 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d 65 00 | AndAuditAlarm.ZwQuerySystemTime. |
| dc60 | 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d 65 00 4e 74 51 75 65 72 79 53 | __imp_ZwQuerySystemTime.NtQueryS |
| dc80 | 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d | ystemTime.__imp_NtQuerySystemTim |
| dca0 | 65 00 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 5f 5f 69 6d 70 | e.ZwWaitForMultipleObjects.__imp |
| dcc0 | 5f 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 4e 74 57 61 69 74 | _ZwWaitForMultipleObjects.NtWait |
| dce0 | 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 | ForMultipleObjects.__imp_NtWaitF |
| dd00 | 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 | orMultipleObjects.ZwSetInformati |
| dd20 | 6f 6e 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f | onObject.__imp_ZwSetInformationO |
| dd40 | 62 6a 65 63 74 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 5f 5f 69 | bject.NtSetInformationObject.__i |
| dd60 | 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 5a 77 43 61 6e 63 | mp_NtSetInformationObject.ZwCanc |
| dd80 | 65 6c 49 6f 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 61 6e 63 65 6c 49 6f 46 69 6c 65 00 4e 74 | elIoFile.__imp_ZwCancelIoFile.Nt |
| dda0 | 43 61 6e 63 65 6c 49 6f 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 61 6e 63 65 6c 49 6f 46 69 6c | CancelIoFile.__imp_NtCancelIoFil |
| ddc0 | 65 00 5a 77 54 72 61 63 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 54 72 61 63 65 45 76 65 6e | e.ZwTraceEvent.__imp_ZwTraceEven |
| dde0 | 74 00 4e 74 54 72 61 63 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 54 72 61 63 65 45 76 65 6e | t.NtTraceEvent.__imp_NtTraceEven |
| de00 | 74 00 5a 77 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 50 6f 77 | t.ZwPowerInformation.__imp_ZwPow |
| de20 | 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4e 74 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e | erInformation.NtPowerInformation |
| de40 | 00 5f 5f 69 6d 70 5f 4e 74 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5a 77 53 65 74 56 | .__imp_NtPowerInformation.ZwSetV |
| de60 | 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 56 61 6c 75 65 4b 65 79 00 4e 74 53 65 | alueKey.__imp_ZwSetValueKey.NtSe |
| de80 | 74 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 5a 77 | tValueKey.__imp_NtSetValueKey.Zw |
| dea0 | 43 61 6e 63 65 6c 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 43 61 6e 63 65 6c 54 69 6d 65 72 00 | CancelTimer.__imp_ZwCancelTimer. |
| dec0 | 4e 74 43 61 6e 63 65 6c 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 43 61 6e 63 65 6c 54 69 6d 65 | NtCancelTimer.__imp_NtCancelTime |
| dee0 | 72 00 5a 77 53 65 74 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 54 69 6d 65 72 00 4e 74 | r.ZwSetTimer.__imp_ZwSetTimer.Nt |
| df00 | 53 65 74 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 54 69 6d 65 72 00 5a 77 41 63 63 65 | SetTimer.__imp_NtSetTimer.ZwAcce |
| df20 | 70 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 70 74 43 6f 6e 6e | ptConnectPort.__imp_ZwAcceptConn |
| df40 | 65 63 74 50 6f 72 74 00 4e 74 41 63 63 65 70 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d | ectPort.NtAcceptConnectPort.__im |
| df60 | 70 5f 4e 74 41 63 63 65 70 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5a 77 41 63 63 65 73 73 43 68 | p_NtAcceptConnectPort.ZwAccessCh |
| df80 | 65 63 6b 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 00 4e 74 41 63 63 65 73 73 | eck.__imp_ZwAccessCheck.NtAccess |
| dfa0 | 43 68 65 63 6b 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 00 5a 77 41 63 63 65 | Check.__imp_NtAccessCheck.ZwAcce |
| dfc0 | 73 73 43 68 65 63 6b 42 79 54 79 70 65 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 | ssCheckByType.__imp_ZwAccessChec |
| dfe0 | 6b 42 79 54 79 70 65 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 00 5f 5f 69 6d | kByType.NtAccessCheckByType.__im |
| e000 | 70 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 00 5a 77 41 63 63 65 73 73 43 68 | p_NtAccessCheckByType.ZwAccessCh |
| e020 | 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 | eckByTypeResultList.__imp_ZwAcce |
| e040 | 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 4e 74 41 63 63 65 73 73 | ssCheckByTypeResultList.NtAccess |
| e060 | 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 5f 5f 69 6d 70 5f 4e 74 41 63 | CheckByTypeResultList.__imp_NtAc |
| e080 | 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 5a 77 41 63 63 65 | cessCheckByTypeResultList.ZwAcce |
| e0a0 | 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 | ssCheckByTypeResultListAndAuditA |
| e0c0 | 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 | larm.__imp_ZwAccessCheckByTypeRe |
| e0e0 | 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 41 63 63 65 73 73 43 68 | sultListAndAuditAlarm.NtAccessCh |
| e100 | 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d | eckByTypeResultListAndAuditAlarm |
| e120 | 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 | .__imp_NtAccessCheckByTypeResult |
| e140 | 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 | ListAndAuditAlarm.ZwAccessCheckB |
| e160 | 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 | yTypeResultListAndAuditAlarmByHa |
| e180 | 6e 64 6c 65 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 | ndle.__imp_ZwAccessCheckByTypeRe |
| e1a0 | 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 00 4e 74 | sultListAndAuditAlarmByHandle.Nt |
| e1c0 | 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 | AccessCheckByTypeResultListAndAu |
| e1e0 | 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 | ditAlarmByHandle.__imp_NtAccessC |
| e200 | 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 | heckByTypeResultListAndAuditAlar |
| e220 | 6d 42 79 48 61 6e 64 6c 65 00 5a 77 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a | mByHandle.ZwAddBootEntry.__imp_Z |
| e240 | 77 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 4e 74 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 | wAddBootEntry.NtAddBootEntry.__i |
| e260 | 6d 70 5f 4e 74 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 5a 77 41 64 64 44 72 69 76 65 72 45 6e 74 | mp_NtAddBootEntry.ZwAddDriverEnt |
| e280 | 72 79 00 5f 5f 69 6d 70 5f 5a 77 41 64 64 44 72 69 76 65 72 45 6e 74 72 79 00 4e 74 41 64 64 44 | ry.__imp_ZwAddDriverEntry.NtAddD |
| e2a0 | 72 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 41 64 64 44 72 69 76 65 72 45 6e 74 72 | riverEntry.__imp_NtAddDriverEntr |
| e2c0 | 79 00 5a 77 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 41 64 | y.ZwAdjustGroupsToken.__imp_ZwAd |
| e2e0 | 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e 00 4e 74 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f | justGroupsToken.NtAdjustGroupsTo |
| e300 | 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e 00 5a 77 | ken.__imp_NtAdjustGroupsToken.Zw |
| e320 | 41 6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 41 6c 65 72 74 52 | AlertResumeThread.__imp_ZwAlertR |
| e340 | 65 73 75 6d 65 54 68 72 65 61 64 00 4e 74 41 6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 61 64 00 | esumeThread.NtAlertResumeThread. |
| e360 | 5f 5f 69 6d 70 5f 4e 74 41 6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 61 64 00 5a 77 41 6c 65 72 | __imp_NtAlertResumeThread.ZwAler |
| e380 | 74 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 41 6c 65 72 74 54 68 72 65 61 64 00 4e 74 41 6c | tThread.__imp_ZwAlertThread.NtAl |
| e3a0 | 65 72 74 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 41 6c 65 72 74 54 68 72 65 61 64 00 5a 77 | ertThread.__imp_NtAlertThread.Zw |
| e3c0 | 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 00 5f 5f 69 6d 70 5f 5a 77 | AllocateLocallyUniqueId.__imp_Zw |
| e3e0 | 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 00 4e 74 41 6c 6c 6f 63 61 | AllocateLocallyUniqueId.NtAlloca |
| e400 | 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 00 5f 5f 69 6d 70 5f 4e 74 41 6c 6c 6f 63 61 | teLocallyUniqueId.__imp_NtAlloca |
| e420 | 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 00 5a 77 41 6c 6c 6f 63 61 74 65 55 73 65 72 | teLocallyUniqueId.ZwAllocateUser |
| e440 | 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 5f 5a 77 41 6c 6c 6f 63 61 74 65 55 73 | PhysicalPages.__imp_ZwAllocateUs |
| e460 | 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 4e 74 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 | erPhysicalPages.NtAllocateUserPh |
| e480 | 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 5f 4e 74 41 6c 6c 6f 63 61 74 65 55 73 65 72 | ysicalPages.__imp_NtAllocateUser |
| e4a0 | 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5a 77 41 6c 6c 6f 63 61 74 65 55 75 69 64 73 00 5f 5f | PhysicalPages.ZwAllocateUuids.__ |
| e4c0 | 69 6d 70 5f 5a 77 41 6c 6c 6f 63 61 74 65 55 75 69 64 73 00 4e 74 41 6c 6c 6f 63 61 74 65 55 75 | imp_ZwAllocateUuids.NtAllocateUu |
| e4e0 | 69 64 73 00 5f 5f 69 6d 70 5f 4e 74 41 6c 6c 6f 63 61 74 65 55 75 69 64 73 00 5a 77 41 72 65 4d | ids.__imp_NtAllocateUuids.ZwAreM |
| e500 | 61 70 70 65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 00 5f 5f 69 6d 70 5f 5a 77 41 72 65 4d 61 70 | appedFilesTheSame.__imp_ZwAreMap |
| e520 | 70 65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 00 4e 74 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73 | pedFilesTheSame.NtAreMappedFiles |
| e540 | 54 68 65 53 61 6d 65 00 5f 5f 69 6d 70 5f 4e 74 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73 54 68 | TheSame.__imp_NtAreMappedFilesTh |
| e560 | 65 53 61 6d 65 00 5a 77 41 73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 | eSame.ZwAssignProcessToJobObject |
| e580 | 00 5f 5f 69 6d 70 5f 5a 77 41 73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 | .__imp_ZwAssignProcessToJobObjec |
| e5a0 | 74 00 4e 74 41 73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 | t.NtAssignProcessToJobObject.__i |
| e5c0 | 6d 70 5f 4e 74 41 73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 | mp_NtAssignProcessToJobObject.Zw |
| e5e0 | 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74 00 5f 5f 69 6d 70 5f | CancelDeviceWakeupRequest.__imp_ |
| e600 | 5a 77 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74 00 4e 74 43 61 | ZwCancelDeviceWakeupRequest.NtCa |
| e620 | 6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74 00 5f 5f 69 6d 70 5f 4e 74 | ncelDeviceWakeupRequest.__imp_Nt |
| e640 | 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74 00 5a 77 43 6f 6d 70 | CancelDeviceWakeupRequest.ZwComp |
| e660 | 61 63 74 4b 65 79 73 00 5f 5f 69 6d 70 5f 5a 77 43 6f 6d 70 61 63 74 4b 65 79 73 00 4e 74 43 6f | actKeys.__imp_ZwCompactKeys.NtCo |
| e680 | 6d 70 61 63 74 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6d 70 61 63 74 4b 65 79 73 00 5a 77 | mpactKeys.__imp_NtCompactKeys.Zw |
| e6a0 | 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 5f 5f 69 6d 70 5f 5a 77 43 6f 6d 70 61 72 65 54 6f 6b | CompareTokens.__imp_ZwCompareTok |
| e6c0 | 65 6e 73 00 4e 74 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6d 70 | ens.NtCompareTokens.__imp_NtComp |
| e6e0 | 61 72 65 54 6f 6b 65 6e 73 00 5a 77 43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 | areTokens.ZwCompleteConnectPort. |
| e700 | 5f 5f 69 6d 70 5f 5a 77 43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 4e 74 43 6f | __imp_ZwCompleteConnectPort.NtCo |
| e720 | 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6d 70 6c 65 | mpleteConnectPort.__imp_NtComple |
| e740 | 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5a 77 43 6f 6d 70 72 65 73 73 4b 65 79 00 5f 5f 69 6d | teConnectPort.ZwCompressKey.__im |
| e760 | 70 5f 5a 77 43 6f 6d 70 72 65 73 73 4b 65 79 00 4e 74 43 6f 6d 70 72 65 73 73 4b 65 79 00 5f 5f | p_ZwCompressKey.NtCompressKey.__ |
| e780 | 69 6d 70 5f 4e 74 43 6f 6d 70 72 65 73 73 4b 65 79 00 5a 77 43 6f 6e 6e 65 63 74 50 6f 72 74 00 | imp_NtCompressKey.ZwConnectPort. |
| e7a0 | 5f 5f 69 6d 70 5f 5a 77 43 6f 6e 6e 65 63 74 50 6f 72 74 00 4e 74 43 6f 6e 6e 65 63 74 50 6f 72 | __imp_ZwConnectPort.NtConnectPor |
| e7c0 | 74 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5a 77 43 72 65 61 74 65 44 65 | t.__imp_NtConnectPort.ZwCreateDe |
| e7e0 | 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 44 65 62 75 67 4f 62 6a | bugObject.__imp_ZwCreateDebugObj |
| e800 | 65 63 74 00 4e 74 43 72 65 61 74 65 44 65 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 | ect.NtCreateDebugObject.__imp_Nt |
| e820 | 43 72 65 61 74 65 44 65 62 75 67 4f 62 6a 65 63 74 00 5a 77 43 72 65 61 74 65 44 69 72 65 63 74 | CreateDebugObject.ZwCreateDirect |
| e840 | 6f 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 | oryObject.__imp_ZwCreateDirector |
| e860 | 79 4f 62 6a 65 63 74 00 4e 74 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 | yObject.NtCreateDirectoryObject. |
| e880 | 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5a 77 | __imp_NtCreateDirectoryObject.Zw |
| e8a0 | 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 45 76 | CreateEventPair.__imp_ZwCreateEv |
| e8c0 | 65 6e 74 50 61 69 72 00 4e 74 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f | entPair.NtCreateEventPair.__imp_ |
| e8e0 | 4e 74 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72 00 5a 77 43 72 65 61 74 65 49 6f 43 6f 6d 70 | NtCreateEventPair.ZwCreateIoComp |
| e900 | 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f | letion.__imp_ZwCreateIoCompletio |
| e920 | 6e 00 4e 74 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 43 | n.NtCreateIoCompletion.__imp_NtC |
| e940 | 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 43 72 65 61 74 65 4a 6f 62 4f 62 6a | reateIoCompletion.ZwCreateJobObj |
| e960 | 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 4e 74 43 72 | ect.__imp_ZwCreateJobObject.NtCr |
| e980 | 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 4a 6f 62 4f | eateJobObject.__imp_NtCreateJobO |
| e9a0 | 62 6a 65 63 74 00 5a 77 43 72 65 61 74 65 4a 6f 62 53 65 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 | bject.ZwCreateJobSet.__imp_ZwCre |
| e9c0 | 61 74 65 4a 6f 62 53 65 74 00 4e 74 43 72 65 61 74 65 4a 6f 62 53 65 74 00 5f 5f 69 6d 70 5f 4e | ateJobSet.NtCreateJobSet.__imp_N |
| e9e0 | 74 43 72 65 61 74 65 4a 6f 62 53 65 74 00 5a 77 43 72 65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 | tCreateJobSet.ZwCreateKeyedEvent |
| ea00 | 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 00 4e 74 43 72 65 61 | .__imp_ZwCreateKeyedEvent.NtCrea |
| ea20 | 74 65 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 4b 65 79 65 64 | teKeyedEvent.__imp_NtCreateKeyed |
| ea40 | 45 76 65 6e 74 00 5a 77 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 5f 5f 69 6d 70 | Event.ZwCreateMailslotFile.__imp |
| ea60 | 5f 5a 77 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 4e 74 43 72 65 61 74 65 4d 61 | _ZwCreateMailslotFile.NtCreateMa |
| ea80 | 69 6c 73 6c 6f 74 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f | ilslotFile.__imp_NtCreateMailslo |
| eaa0 | 74 46 69 6c 65 00 5a 77 43 72 65 61 74 65 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 | tFile.ZwCreateMutant.__imp_ZwCre |
| eac0 | 61 74 65 4d 75 74 61 6e 74 00 4e 74 43 72 65 61 74 65 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 4e | ateMutant.NtCreateMutant.__imp_N |
| eae0 | 74 43 72 65 61 74 65 4d 75 74 61 6e 74 00 5a 77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 | tCreateMutant.ZwCreateNamedPipeF |
| eb00 | 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 00 | ile.__imp_ZwCreateNamedPipeFile. |
| eb20 | 4e 74 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 | NtCreateNamedPipeFile.__imp_NtCr |
| eb40 | 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 00 5a 77 43 72 65 61 74 65 50 61 67 69 6e 67 | eateNamedPipeFile.ZwCreatePaging |
| eb60 | 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 50 61 67 69 6e 67 46 69 6c 65 00 4e 74 | File.__imp_ZwCreatePagingFile.Nt |
| eb80 | 43 72 65 61 74 65 50 61 67 69 6e 67 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 50 | CreatePagingFile.__imp_NtCreateP |
| eba0 | 61 67 69 6e 67 46 69 6c 65 00 5a 77 43 72 65 61 74 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 43 | agingFile.ZwCreatePort.__imp_ZwC |
| ebc0 | 72 65 61 74 65 50 6f 72 74 00 4e 74 43 72 65 61 74 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 43 | reatePort.NtCreatePort.__imp_NtC |
| ebe0 | 72 65 61 74 65 50 6f 72 74 00 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f | reatePort.ZwCreateProcess.__imp_ |
| ec00 | 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 73 00 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 00 | ZwCreateProcess.NtCreateProcess. |
| ec20 | 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 00 5a 77 43 72 65 61 74 65 50 72 | __imp_NtCreateProcess.ZwCreatePr |
| ec40 | 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 50 72 6f 66 69 6c 65 00 4e 74 43 72 | ofile.__imp_ZwCreateProfile.NtCr |
| ec60 | 65 61 74 65 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 50 72 6f 66 69 6c | eateProfile.__imp_NtCreateProfil |
| ec80 | 65 00 5a 77 43 72 65 61 74 65 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 | e.ZwCreateSemaphore.__imp_ZwCrea |
| eca0 | 74 65 53 65 6d 61 70 68 6f 72 65 00 4e 74 43 72 65 61 74 65 53 65 6d 61 70 68 6f 72 65 00 5f 5f | teSemaphore.NtCreateSemaphore.__ |
| ecc0 | 69 6d 70 5f 4e 74 43 72 65 61 74 65 53 65 6d 61 70 68 6f 72 65 00 5a 77 43 72 65 61 74 65 53 79 | imp_NtCreateSemaphore.ZwCreateSy |
| ece0 | 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 53 | mbolicLinkObject.__imp_ZwCreateS |
| ed00 | 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 4e 74 43 72 65 61 74 65 53 79 6d 62 6f 6c | ymbolicLinkObject.NtCreateSymbol |
| ed20 | 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 53 79 6d 62 6f | icLinkObject.__imp_NtCreateSymbo |
| ed40 | 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5a 77 43 72 65 61 74 65 54 69 6d 65 72 00 5f 5f 69 6d | licLinkObject.ZwCreateTimer.__im |
| ed60 | 70 5f 5a 77 43 72 65 61 74 65 54 69 6d 65 72 00 4e 74 43 72 65 61 74 65 54 69 6d 65 72 00 5f 5f | p_ZwCreateTimer.NtCreateTimer.__ |
| ed80 | 69 6d 70 5f 4e 74 43 72 65 61 74 65 54 69 6d 65 72 00 5a 77 43 72 65 61 74 65 54 6f 6b 65 6e 00 | imp_NtCreateTimer.ZwCreateToken. |
| eda0 | 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 54 6f 6b 65 6e 00 4e 74 43 72 65 61 74 65 54 6f 6b 65 | __imp_ZwCreateToken.NtCreateToke |
| edc0 | 6e 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 54 6f 6b 65 6e 00 5a 77 43 72 65 61 74 65 57 61 | n.__imp_NtCreateToken.ZwCreateWa |
| ede0 | 69 74 61 62 6c 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 57 61 69 74 61 62 6c | itablePort.__imp_ZwCreateWaitabl |
| ee00 | 65 50 6f 72 74 00 4e 74 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f 72 74 00 5f 5f 69 6d 70 | ePort.NtCreateWaitablePort.__imp |
| ee20 | 5f 4e 74 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f 72 74 00 5a 77 44 65 62 75 67 41 63 74 | _NtCreateWaitablePort.ZwDebugAct |
| ee40 | 69 76 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 44 65 62 75 67 41 63 74 69 76 65 50 72 | iveProcess.__imp_ZwDebugActivePr |
| ee60 | 6f 63 65 73 73 00 4e 74 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 | ocess.NtDebugActiveProcess.__imp |
| ee80 | 5f 4e 74 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 5a 77 44 65 62 75 67 43 6f 6e | _NtDebugActiveProcess.ZwDebugCon |
| eea0 | 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 5a 77 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 00 4e 74 44 65 | tinue.__imp_ZwDebugContinue.NtDe |
| eec0 | 62 75 67 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 4e 74 44 65 62 75 67 43 6f 6e 74 69 6e 75 | bugContinue.__imp_NtDebugContinu |
| eee0 | 65 00 5a 77 44 65 6c 65 74 65 41 74 6f 6d 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 41 74 6f | e.ZwDeleteAtom.__imp_ZwDeleteAto |
| ef00 | 6d 00 4e 74 44 65 6c 65 74 65 41 74 6f 6d 00 5f 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 41 74 6f | m.NtDeleteAtom.__imp_NtDeleteAto |
| ef20 | 6d 00 5a 77 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 | m.ZwDeleteBootEntry.__imp_ZwDele |
| ef40 | 74 65 42 6f 6f 74 45 6e 74 72 79 00 4e 74 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 5f 5f | teBootEntry.NtDeleteBootEntry.__ |
| ef60 | 69 6d 70 5f 4e 74 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 5a 77 44 65 6c 65 74 65 44 72 | imp_NtDeleteBootEntry.ZwDeleteDr |
| ef80 | 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 44 72 69 76 65 72 45 6e | iverEntry.__imp_ZwDeleteDriverEn |
| efa0 | 74 72 79 00 4e 74 44 65 6c 65 74 65 44 72 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 | try.NtDeleteDriverEntry.__imp_Nt |
| efc0 | 44 65 6c 65 74 65 44 72 69 76 65 72 45 6e 74 72 79 00 5a 77 44 65 6c 65 74 65 46 69 6c 65 00 5f | DeleteDriverEntry.ZwDeleteFile._ |
| efe0 | 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 46 69 6c 65 00 4e 74 44 65 6c 65 74 65 46 69 6c 65 00 5f | _imp_ZwDeleteFile.NtDeleteFile._ |
| f000 | 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 46 69 6c 65 00 5a 77 44 65 6c 65 74 65 4b 65 79 00 5f 5f | _imp_NtDeleteFile.ZwDeleteKey.__ |
| f020 | 69 6d 70 5f 5a 77 44 65 6c 65 74 65 4b 65 79 00 4e 74 44 65 6c 65 74 65 4b 65 79 00 5f 5f 69 6d | imp_ZwDeleteKey.NtDeleteKey.__im |
| f040 | 70 5f 4e 74 44 65 6c 65 74 65 4b 65 79 00 5a 77 44 65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69 | p_NtDeleteKey.ZwDeleteObjectAudi |
| f060 | 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69 74 | tAlarm.__imp_ZwDeleteObjectAudit |
| f080 | 41 6c 61 72 6d 00 4e 74 44 65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f | Alarm.NtDeleteObjectAuditAlarm._ |
| f0a0 | 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 | _imp_NtDeleteObjectAuditAlarm.Zw |
| f0c0 | 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 56 61 6c | DeleteValueKey.__imp_ZwDeleteVal |
| f0e0 | 75 65 4b 65 79 00 4e 74 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 44 | ueKey.NtDeleteValueKey.__imp_NtD |
| f100 | 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 00 5a 77 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 5f 5f | eleteValueKey.ZwDisplayString.__ |
| f120 | 69 6d 70 5f 5a 77 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 4e 74 44 69 73 70 6c 61 79 53 74 72 | imp_ZwDisplayString.NtDisplayStr |
| f140 | 69 6e 67 00 5f 5f 69 6d 70 5f 4e 74 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 5a 77 45 6e 75 6d | ing.__imp_NtDisplayString.ZwEnum |
| f160 | 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65 73 00 5f 5f 69 6d 70 5f 5a 77 45 6e 75 6d 65 72 61 | erateBootEntries.__imp_ZwEnumera |
| f180 | 74 65 42 6f 6f 74 45 6e 74 72 69 65 73 00 4e 74 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 | teBootEntries.NtEnumerateBootEnt |
| f1a0 | 72 69 65 73 00 5f 5f 69 6d 70 5f 4e 74 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65 | ries.__imp_NtEnumerateBootEntrie |
| f1c0 | 73 00 5a 77 45 6e 75 6d 65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 00 5f 5f 69 6d 70 | s.ZwEnumerateDriverEntries.__imp |
| f1e0 | 5f 5a 77 45 6e 75 6d 65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 00 4e 74 45 6e 75 6d | _ZwEnumerateDriverEntries.NtEnum |
| f200 | 65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 00 5f 5f 69 6d 70 5f 4e 74 45 6e 75 6d 65 | erateDriverEntries.__imp_NtEnume |
| f220 | 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 00 5a 77 45 6e 75 6d 65 72 61 74 65 53 79 73 | rateDriverEntries.ZwEnumerateSys |
| f240 | 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 00 5f 5f 69 6d 70 5f 5a 77 45 | temEnvironmentValuesEx.__imp_ZwE |
| f260 | 6e 75 6d 65 72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 | numerateSystemEnvironmentValuesE |
| f280 | 78 00 4e 74 45 6e 75 6d 65 72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 | x.NtEnumerateSystemEnvironmentVa |
| f2a0 | 6c 75 65 73 45 78 00 5f 5f 69 6d 70 5f 4e 74 45 6e 75 6d 65 72 61 74 65 53 79 73 74 65 6d 45 6e | luesEx.__imp_NtEnumerateSystemEn |
| f2c0 | 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 00 5a 77 45 78 74 65 6e 64 53 65 63 74 69 6f | vironmentValuesEx.ZwExtendSectio |
| f2e0 | 6e 00 5f 5f 69 6d 70 5f 5a 77 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 00 4e 74 45 78 74 65 6e 64 | n.__imp_ZwExtendSection.NtExtend |
| f300 | 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 00 5a 77 | Section.__imp_NtExtendSection.Zw |
| f320 | 46 69 6c 74 65 72 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 46 69 6c 74 65 72 54 6f 6b 65 6e 00 | FilterToken.__imp_ZwFilterToken. |
| f340 | 4e 74 46 69 6c 74 65 72 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 46 69 6c 74 65 72 54 6f 6b 65 | NtFilterToken.__imp_NtFilterToke |
| f360 | 6e 00 5a 77 46 6c 75 73 68 49 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 5f 5f 69 6d 70 5f | n.ZwFlushInstructionCache.__imp_ |
| f380 | 5a 77 46 6c 75 73 68 49 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 4e 74 46 6c 75 73 68 49 | ZwFlushInstructionCache.NtFlushI |
| f3a0 | 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 5f 5f 69 6d 70 5f 4e 74 46 6c 75 73 68 49 6e 73 | nstructionCache.__imp_NtFlushIns |
| f3c0 | 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 5a 77 46 6c 75 73 68 4b 65 79 00 5f 5f 69 6d 70 5f 5a | tructionCache.ZwFlushKey.__imp_Z |
| f3e0 | 77 46 6c 75 73 68 4b 65 79 00 4e 74 46 6c 75 73 68 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 46 6c 75 | wFlushKey.NtFlushKey.__imp_NtFlu |
| f400 | 73 68 4b 65 79 00 5a 77 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 | shKey.ZwFlushVirtualMemory.__imp |
| f420 | 5f 5a 77 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 46 6c 75 73 68 56 69 72 | _ZwFlushVirtualMemory.NtFlushVir |
| f440 | 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 46 6c 75 73 68 56 69 72 74 75 61 6c 4d | tualMemory.__imp_NtFlushVirtualM |
| f460 | 65 6d 6f 72 79 00 5a 77 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 5a | emory.ZwFlushWriteBuffer.__imp_Z |
| f480 | 77 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72 00 4e 74 46 6c 75 73 68 57 72 69 74 65 42 75 | wFlushWriteBuffer.NtFlushWriteBu |
| f4a0 | 66 66 65 72 00 5f 5f 69 6d 70 5f 4e 74 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72 00 5a 77 | ffer.__imp_NtFlushWriteBuffer.Zw |
| f4c0 | 46 72 65 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 5f 5a 77 46 72 | FreeUserPhysicalPages.__imp_ZwFr |
| f4e0 | 65 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 4e 74 46 72 65 65 55 73 65 72 50 68 | eeUserPhysicalPages.NtFreeUserPh |
| f500 | 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 5f 4e 74 46 72 65 65 55 73 65 72 50 68 79 73 | ysicalPages.__imp_NtFreeUserPhys |
| f520 | 69 63 61 6c 50 61 67 65 73 00 5a 77 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 5f 5f 69 | icalPages.ZwGetContextThread.__i |
| f540 | 6d 70 5f 5a 77 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 4e 74 47 65 74 43 6f 6e 74 65 | mp_ZwGetContextThread.NtGetConte |
| f560 | 78 74 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 | xtThread.__imp_NtGetContextThrea |
| f580 | 64 00 5a 77 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 5f 5f | d.ZwGetCurrentProcessorNumber.__ |
| f5a0 | 69 6d 70 5f 5a 77 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 | imp_ZwGetCurrentProcessorNumber. |
| f5c0 | 4e 74 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 5f 5f 69 6d | NtGetCurrentProcessorNumber.__im |
| f5e0 | 70 5f 4e 74 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 5a 77 | p_NtGetCurrentProcessorNumber.Zw |
| f600 | 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 5a 77 47 65 74 44 | GetDevicePowerState.__imp_ZwGetD |
| f620 | 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 65 00 4e 74 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 | evicePowerState.NtGetDevicePower |
| f640 | 53 74 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 | State.__imp_NtGetDevicePowerStat |
| f660 | 65 00 5a 77 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 47 65 74 | e.ZwGetPlugPlayEvent.__imp_ZwGet |
| f680 | 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 4e 74 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 | PlugPlayEvent.NtGetPlugPlayEvent |
| f6a0 | 00 5f 5f 69 6d 70 5f 4e 74 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 5a 77 47 65 74 57 | .__imp_NtGetPlugPlayEvent.ZwGetW |
| f6c0 | 72 69 74 65 57 61 74 63 68 00 5f 5f 69 6d 70 5f 5a 77 47 65 74 57 72 69 74 65 57 61 74 63 68 00 | riteWatch.__imp_ZwGetWriteWatch. |
| f6e0 | 4e 74 47 65 74 57 72 69 74 65 57 61 74 63 68 00 5f 5f 69 6d 70 5f 4e 74 47 65 74 57 72 69 74 65 | NtGetWriteWatch.__imp_NtGetWrite |
| f700 | 57 61 74 63 68 00 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 | Watch.ZwImpersonateAnonymousToke |
| f720 | 6e 00 5f 5f 69 6d 70 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f | n.__imp_ZwImpersonateAnonymousTo |
| f740 | 6b 65 6e 00 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 00 | ken.NtImpersonateAnonymousToken. |
| f760 | 5f 5f 69 6d 70 5f 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 | __imp_NtImpersonateAnonymousToke |
| f780 | 6e 00 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 49 6d | n.ZwImpersonateThread.__imp_ZwIm |
| f7a0 | 70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 00 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 | personateThread.NtImpersonateThr |
| f7c0 | 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 00 5a 77 | ead.__imp_NtImpersonateThread.Zw |
| f7e0 | 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74 72 79 00 5f 5f 69 6d 70 5f 5a 77 49 6e 69 74 69 | InitializeRegistry.__imp_ZwIniti |
| f800 | 61 6c 69 7a 65 52 65 67 69 73 74 72 79 00 4e 74 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74 | alizeRegistry.NtInitializeRegist |
| f820 | 72 79 00 5f 5f 69 6d 70 5f 4e 74 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74 72 79 00 5a 77 | ry.__imp_NtInitializeRegistry.Zw |
| f840 | 49 6e 69 74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 49 6e 69 74 | InitiatePowerAction.__imp_ZwInit |
| f860 | 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 00 4e 74 49 6e 69 74 69 61 74 65 50 6f 77 65 72 41 | iatePowerAction.NtInitiatePowerA |
| f880 | 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 49 6e 69 74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f | ction.__imp_NtInitiatePowerActio |
| f8a0 | 6e 00 5a 77 49 73 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 5f 5f 69 6d | n.ZwIsSystemResumeAutomatic.__im |
| f8c0 | 70 5f 5a 77 49 73 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 4e 74 49 73 | p_ZwIsSystemResumeAutomatic.NtIs |
| f8e0 | 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 5f 5f 69 6d 70 5f 4e 74 49 73 | SystemResumeAutomatic.__imp_NtIs |
| f900 | 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 5a 77 4c 69 73 74 65 6e 50 6f | SystemResumeAutomatic.ZwListenPo |
| f920 | 72 74 00 5f 5f 69 6d 70 5f 5a 77 4c 69 73 74 65 6e 50 6f 72 74 00 4e 74 4c 69 73 74 65 6e 50 6f | rt.__imp_ZwListenPort.NtListenPo |
| f940 | 72 74 00 5f 5f 69 6d 70 5f 4e 74 4c 69 73 74 65 6e 50 6f 72 74 00 5a 77 4c 6f 61 64 44 72 69 76 | rt.__imp_NtListenPort.ZwLoadDriv |
| f960 | 65 72 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 61 64 44 72 69 76 65 72 00 4e 74 4c 6f 61 64 44 72 69 76 | er.__imp_ZwLoadDriver.NtLoadDriv |
| f980 | 65 72 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 61 64 44 72 69 76 65 72 00 5a 77 4c 6f 61 64 4b 65 79 00 | er.__imp_NtLoadDriver.ZwLoadKey. |
| f9a0 | 5f 5f 69 6d 70 5f 5a 77 4c 6f 61 64 4b 65 79 00 4e 74 4c 6f 61 64 4b 65 79 00 5f 5f 69 6d 70 5f | __imp_ZwLoadKey.NtLoadKey.__imp_ |
| f9c0 | 4e 74 4c 6f 61 64 4b 65 79 00 5a 77 4c 6f 61 64 4b 65 79 32 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 61 | NtLoadKey.ZwLoadKey2.__imp_ZwLoa |
| f9e0 | 64 4b 65 79 32 00 4e 74 4c 6f 61 64 4b 65 79 32 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 61 64 4b 65 79 | dKey2.NtLoadKey2.__imp_NtLoadKey |
| fa00 | 32 00 5a 77 4c 6f 61 64 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 61 64 4b 65 79 45 78 00 | 2.ZwLoadKeyEx.__imp_ZwLoadKeyEx. |
| fa20 | 4e 74 4c 6f 61 64 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 61 64 4b 65 79 45 78 00 5a 77 | NtLoadKeyEx.__imp_NtLoadKeyEx.Zw |
| fa40 | 4c 6f 63 6b 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 63 6b 46 69 6c 65 00 4e 74 4c 6f 63 6b | LockFile.__imp_ZwLockFile.NtLock |
| fa60 | 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b 46 69 6c 65 00 5a 77 4c 6f 63 6b 50 72 6f 64 | File.__imp_NtLockFile.ZwLockProd |
| fa80 | 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 63 6b 50 72 | uctActivationKeys.__imp_ZwLockPr |
| faa0 | 6f 64 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 4e 74 4c 6f 63 6b 50 72 6f 64 75 63 | oductActivationKeys.NtLockProduc |
| fac0 | 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b 50 72 6f 64 | tActivationKeys.__imp_NtLockProd |
| fae0 | 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 5a 77 4c 6f 63 6b 52 65 67 69 73 74 72 79 | uctActivationKeys.ZwLockRegistry |
| fb00 | 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 63 6b 52 65 67 69 73 74 72 79 4b 65 79 00 4e 74 4c 6f | Key.__imp_ZwLockRegistryKey.NtLo |
| fb20 | 63 6b 52 65 67 69 73 74 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b 52 65 67 69 73 74 | ckRegistryKey.__imp_NtLockRegist |
| fb40 | 72 79 4b 65 79 00 5a 77 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f | ryKey.ZwLockVirtualMemory.__imp_ |
| fb60 | 5a 77 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 4c 6f 63 6b 56 69 72 74 75 61 | ZwLockVirtualMemory.NtLockVirtua |
| fb80 | 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 | lMemory.__imp_NtLockVirtualMemor |
| fba0 | 79 00 5a 77 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 | y.ZwMakePermanentObject.__imp_Zw |
| fbc0 | 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 74 00 4e 74 4d 61 6b 65 50 65 72 6d 61 6e | MakePermanentObject.NtMakePerman |
| fbe0 | 65 6e 74 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f | entObject.__imp_NtMakePermanentO |
| fc00 | 62 6a 65 63 74 00 5a 77 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d | bject.ZwMakeTemporaryObject.__im |
| fc20 | 70 5f 5a 77 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4f 62 6a 65 63 74 00 4e 74 4d 61 6b 65 54 65 | p_ZwMakeTemporaryObject.NtMakeTe |
| fc40 | 6d 70 6f 72 61 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 | mporaryObject.__imp_NtMakeTempor |
| fc60 | 61 72 79 4f 62 6a 65 63 74 00 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 | aryObject.ZwMapUserPhysicalPages |
| fc80 | 00 5f 5f 69 6d 70 5f 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 4e 74 | .__imp_ZwMapUserPhysicalPages.Nt |
| fca0 | 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 5f 4e 74 4d 61 70 | MapUserPhysicalPages.__imp_NtMap |
| fcc0 | 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5a 77 4d 6f 64 69 66 79 42 6f 6f 74 45 6e | UserPhysicalPages.ZwModifyBootEn |
| fce0 | 74 72 79 00 5f 5f 69 6d 70 5f 5a 77 4d 6f 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 00 4e 74 4d 6f | try.__imp_ZwModifyBootEntry.NtMo |
| fd00 | 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 4d 6f 64 69 66 79 42 6f 6f 74 | difyBootEntry.__imp_NtModifyBoot |
| fd20 | 45 6e 74 72 79 00 5a 77 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f | Entry.ZwModifyDriverEntry.__imp_ |
| fd40 | 5a 77 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72 79 00 4e 74 4d 6f 64 69 66 79 44 72 69 76 | ZwModifyDriverEntry.NtModifyDriv |
| fd60 | 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72 | erEntry.__imp_NtModifyDriverEntr |
| fd80 | 79 00 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5f 5f | y.ZwNotifyChangeDirectoryFile.__ |
| fda0 | 69 6d 70 5f 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 | imp_ZwNotifyChangeDirectoryFile. |
| fdc0 | 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5f 5f 69 6d | NtNotifyChangeDirectoryFile.__im |
| fde0 | 70 5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5a 77 | p_NtNotifyChangeDirectoryFile.Zw |
| fe00 | 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 4e 6f 74 69 66 79 43 68 | NotifyChangeKey.__imp_ZwNotifyCh |
| fe20 | 61 6e 67 65 4b 65 79 00 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b 65 79 00 5f 5f 69 6d 70 5f | angeKey.NtNotifyChangeKey.__imp_ |
| fe40 | 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b 65 79 00 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 | NtNotifyChangeKey.ZwNotifyChange |
| fe60 | 4d 75 6c 74 69 70 6c 65 4b 65 79 73 00 5f 5f 69 6d 70 5f 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 | MultipleKeys.__imp_ZwNotifyChang |
| fe80 | 65 4d 75 6c 74 69 70 6c 65 4b 65 79 73 00 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 | eMultipleKeys.NtNotifyChangeMult |
| fea0 | 69 70 6c 65 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c | ipleKeys.__imp_NtNotifyChangeMul |
| fec0 | 74 69 70 6c 65 4b 65 79 73 00 5a 77 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f | tipleKeys.ZwOpenEventPair.__imp_ |
| fee0 | 5a 77 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 4e 74 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 | ZwOpenEventPair.NtOpenEventPair. |
| ff00 | 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 5a 77 4f 70 65 6e 49 6f 43 6f | __imp_NtOpenEventPair.ZwOpenIoCo |
| ff20 | 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f | mpletion.__imp_ZwOpenIoCompletio |
| ff40 | 6e 00 4e 74 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 | n.NtOpenIoCompletion.__imp_NtOpe |
| ff60 | 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f | nIoCompletion.ZwOpenJobObject.__ |
| ff80 | 69 6d 70 5f 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 00 4e 74 4f 70 65 6e 4a 6f 62 4f 62 6a | imp_ZwOpenJobObject.NtOpenJobObj |
| ffa0 | 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 4f 70 65 6e | ect.__imp_NtOpenJobObject.ZwOpen |
| ffc0 | 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e | KeyedEvent.__imp_ZwOpenKeyedEven |
| ffe0 | 74 00 4e 74 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 4b | t.NtOpenKeyedEvent.__imp_NtOpenK |
| 10000 | 65 79 65 64 45 76 65 6e 74 00 5a 77 4f 70 65 6e 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 4f | eyedEvent.ZwOpenMutant.__imp_ZwO |
| 10020 | 70 65 6e 4d 75 74 61 6e 74 00 4e 74 4f 70 65 6e 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 4e 74 4f | penMutant.NtOpenMutant.__imp_NtO |
| 10040 | 70 65 6e 4d 75 74 61 6e 74 00 5a 77 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d | penMutant.ZwOpenObjectAuditAlarm |
| 10060 | 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 | .__imp_ZwOpenObjectAuditAlarm.Nt |
| 10080 | 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 | OpenObjectAuditAlarm.__imp_NtOpe |
| 100a0 | 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 | nObjectAuditAlarm.ZwOpenProcessT |
| 100c0 | 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 00 4e 74 | oken.__imp_ZwOpenProcessToken.Nt |
| 100e0 | 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 50 72 6f | OpenProcessToken.__imp_NtOpenPro |
| 10100 | 63 65 73 73 54 6f 6b 65 6e 00 5a 77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f | cessToken.ZwOpenSemaphore.__imp_ |
| 10120 | 5a 77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 | ZwOpenSemaphore.NtOpenSemaphore. |
| 10140 | 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 5a 77 4f 70 65 6e 53 79 6d 62 | __imp_NtOpenSemaphore.ZwOpenSymb |
| 10160 | 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 53 79 6d 62 6f | olicLinkObject.__imp_ZwOpenSymbo |
| 10180 | 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 4e 74 4f 70 65 6e 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b | licLinkObject.NtOpenSymbolicLink |
| 101a0 | 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f | Object.__imp_NtOpenSymbolicLinkO |
| 101c0 | 62 6a 65 63 74 00 5a 77 4f 70 65 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 54 | bject.ZwOpenThread.__imp_ZwOpenT |
| 101e0 | 68 72 65 61 64 00 4e 74 4f 70 65 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 54 | hread.NtOpenThread.__imp_NtOpenT |
| 10200 | 68 72 65 61 64 00 5a 77 4f 70 65 6e 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 54 69 | hread.ZwOpenTimer.__imp_ZwOpenTi |
| 10220 | 6d 65 72 00 4e 74 4f 70 65 6e 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 54 69 6d 65 | mer.NtOpenTimer.__imp_NtOpenTime |
| 10240 | 72 00 5a 77 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 5a 77 50 6c 75 67 | r.ZwPlugPlayControl.__imp_ZwPlug |
| 10260 | 50 6c 61 79 43 6f 6e 74 72 6f 6c 00 4e 74 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c 00 5f 5f | PlayControl.NtPlugPlayControl.__ |
| 10280 | 69 6d 70 5f 4e 74 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c 00 5a 77 50 72 69 76 69 6c 65 67 | imp_NtPlugPlayControl.ZwPrivileg |
| 102a0 | 65 43 68 65 63 6b 00 5f 5f 69 6d 70 5f 5a 77 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 00 4e 74 | eCheck.__imp_ZwPrivilegeCheck.Nt |
| 102c0 | 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 00 5f 5f 69 6d 70 5f 4e 74 50 72 69 76 69 6c 65 67 65 | PrivilegeCheck.__imp_NtPrivilege |
| 102e0 | 43 68 65 63 6b 00 5a 77 50 72 69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 | Check.ZwPrivilegeObjectAuditAlar |
| 10300 | 6d 00 5f 5f 69 6d 70 5f 5a 77 50 72 69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c | m.__imp_ZwPrivilegeObjectAuditAl |
| 10320 | 61 72 6d 00 4e 74 50 72 69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 | arm.NtPrivilegeObjectAuditAlarm. |
| 10340 | 5f 5f 69 6d 70 5f 4e 74 50 72 69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 | __imp_NtPrivilegeObjectAuditAlar |
| 10360 | 6d 00 5a 77 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 00 | m.ZwPrivilegedServiceAuditAlarm. |
| 10380 | 5f 5f 69 6d 70 5f 5a 77 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41 6c | __imp_ZwPrivilegedServiceAuditAl |
| 103a0 | 61 72 6d 00 4e 74 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41 6c 61 72 | arm.NtPrivilegedServiceAuditAlar |
| 103c0 | 6d 00 5f 5f 69 6d 70 5f 4e 74 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 | m.__imp_NtPrivilegedServiceAudit |
| 103e0 | 41 6c 61 72 6d 00 5a 77 50 75 6c 73 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 50 75 6c 73 65 | Alarm.ZwPulseEvent.__imp_ZwPulse |
| 10400 | 45 76 65 6e 74 00 4e 74 50 75 6c 73 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 50 75 6c 73 65 | Event.NtPulseEvent.__imp_NtPulse |
| 10420 | 45 76 65 6e 74 00 5a 77 51 75 65 72 79 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d | Event.ZwQueryBootEntryOrder.__im |
| 10440 | 70 5f 5a 77 51 75 65 72 79 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 4e 74 51 75 65 72 79 42 | p_ZwQueryBootEntryOrder.NtQueryB |
| 10460 | 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 42 6f 6f 74 45 | ootEntryOrder.__imp_NtQueryBootE |
| 10480 | 6e 74 72 79 4f 72 64 65 72 00 5a 77 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 5f 5f 69 | ntryOrder.ZwQueryBootOptions.__i |
| 104a0 | 6d 70 5f 5a 77 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 4e 74 51 75 65 72 79 42 6f 6f | mp_ZwQueryBootOptions.NtQueryBoo |
| 104c0 | 74 4f 70 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e | tOptions.__imp_NtQueryBootOption |
| 104e0 | 73 00 5a 77 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f | s.ZwQueryDebugFilterState.__imp_ |
| 10500 | 5a 77 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 4e 74 51 75 65 72 79 44 | ZwQueryDebugFilterState.NtQueryD |
| 10520 | 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 44 65 62 | ebugFilterState.__imp_NtQueryDeb |
| 10540 | 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5a 77 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f 62 | ugFilterState.ZwQueryDirectoryOb |
| 10560 | 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 | ject.__imp_ZwQueryDirectoryObjec |
| 10580 | 74 00 4e 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e | t.NtQueryDirectoryObject.__imp_N |
| 105a0 | 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5a 77 51 75 65 72 79 44 72 69 | tQueryDirectoryObject.ZwQueryDri |
| 105c0 | 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 44 72 69 76 65 | verEntryOrder.__imp_ZwQueryDrive |
| 105e0 | 72 45 6e 74 72 79 4f 72 64 65 72 00 4e 74 51 75 65 72 79 44 72 69 76 65 72 45 6e 74 72 79 4f 72 | rEntryOrder.NtQueryDriverEntryOr |
| 10600 | 64 65 72 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 | der.__imp_NtQueryDriverEntryOrde |
| 10620 | 72 00 5a 77 51 75 65 72 79 45 61 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 45 61 46 | r.ZwQueryEaFile.__imp_ZwQueryEaF |
| 10640 | 69 6c 65 00 4e 74 51 75 65 72 79 45 61 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 45 | ile.NtQueryEaFile.__imp_NtQueryE |
| 10660 | 61 46 69 6c 65 00 5a 77 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 | aFile.ZwQueryFullAttributesFile. |
| 10680 | 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 | __imp_ZwQueryFullAttributesFile. |
| 106a0 | 4e 74 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 5f 5f 69 6d 70 5f | NtQueryFullAttributesFile.__imp_ |
| 106c0 | 4e 74 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 5a 77 51 75 65 72 | NtQueryFullAttributesFile.ZwQuer |
| 106e0 | 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e | yInformationAtom.__imp_ZwQueryIn |
| 10700 | 66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e | formationAtom.NtQueryInformation |
| 10720 | 41 74 6f 6d 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 74 6f | Atom.__imp_NtQueryInformationAto |
| 10740 | 6d 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f | m.ZwQueryInformationJobObject.__ |
| 10760 | 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 | imp_ZwQueryInformationJobObject. |
| 10780 | 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d | NtQueryInformationJobObject.__im |
| 107a0 | 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 | p_NtQueryInformationJobObject.Zw |
| 107c0 | 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 | QueryInformationPort.__imp_ZwQue |
| 107e0 | 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 | ryInformationPort.NtQueryInforma |
| 10800 | 74 69 6f 6e 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f | tionPort.__imp_NtQueryInformatio |
| 10820 | 6e 50 6f 72 74 00 5a 77 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 00 5f | nPort.ZwQueryInstallUILanguage._ |
| 10840 | 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 00 4e 74 | _imp_ZwQueryInstallUILanguage.Nt |
| 10860 | 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 4e 74 51 | QueryInstallUILanguage.__imp_NtQ |
| 10880 | 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 00 5a 77 51 75 65 72 79 49 6e 74 | ueryInstallUILanguage.ZwQueryInt |
| 108a0 | 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 74 65 72 76 | ervalProfile.__imp_ZwQueryInterv |
| 108c0 | 61 6c 50 72 6f 66 69 6c 65 00 4e 74 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 | alProfile.NtQueryIntervalProfile |
| 108e0 | 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 5a 77 | .__imp_NtQueryIntervalProfile.Zw |
| 10900 | 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 | QueryIoCompletion.__imp_ZwQueryI |
| 10920 | 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 4e 74 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 | oCompletion.NtQueryIoCompletion. |
| 10940 | 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 51 75 65 72 | __imp_NtQueryIoCompletion.ZwQuer |
| 10960 | 79 4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 4d | yMultipleValueKey.__imp_ZwQueryM |
| 10980 | 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 00 4e 74 51 75 65 72 79 4d 75 6c 74 69 70 6c 65 56 | ultipleValueKey.NtQueryMultipleV |
| 109a0 | 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4d 75 6c 74 69 70 6c 65 56 61 6c | alueKey.__imp_NtQueryMultipleVal |
| 109c0 | 75 65 4b 65 79 00 5a 77 51 75 65 72 79 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 | ueKey.ZwQueryMutant.__imp_ZwQuer |
| 109e0 | 79 4d 75 74 61 6e 74 00 4e 74 51 75 65 72 79 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 | yMutant.NtQueryMutant.__imp_NtQu |
| 10a00 | 65 72 79 4d 75 74 61 6e 74 00 5a 77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 00 5f 5f 69 | eryMutant.ZwQueryOpenSubKeys.__i |
| 10a20 | 6d 70 5f 5a 77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 00 4e 74 51 75 65 72 79 4f 70 65 | mp_ZwQueryOpenSubKeys.NtQueryOpe |
| 10a40 | 6e 53 75 62 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 | nSubKeys.__imp_NtQueryOpenSubKey |
| 10a60 | 73 00 5a 77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 00 5f 5f 69 6d 70 5f 5a 77 51 | s.ZwQueryOpenSubKeysEx.__imp_ZwQ |
| 10a80 | 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 00 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 | ueryOpenSubKeysEx.NtQueryOpenSub |
| 10aa0 | 4b 65 79 73 45 78 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 | KeysEx.__imp_NtQueryOpenSubKeysE |
| 10ac0 | 78 00 5a 77 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 | x.ZwQueryPortInformationProcess. |
| 10ae0 | 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 | __imp_ZwQueryPortInformationProc |
| 10b00 | 65 73 73 00 4e 74 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 | ess.NtQueryPortInformationProces |
| 10b20 | 73 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 | s.__imp_NtQueryPortInformationPr |
| 10b40 | 6f 63 65 73 73 00 5a 77 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c | ocess.ZwQueryQuotaInformationFil |
| 10b60 | 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 | e.__imp_ZwQueryQuotaInformationF |
| 10b80 | 69 6c 65 00 4e 74 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 | ile.NtQueryQuotaInformationFile. |
| 10ba0 | 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c | __imp_NtQueryQuotaInformationFil |
| 10bc0 | 65 00 5a 77 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 | e.ZwQuerySecurityObject.__imp_Zw |
| 10be0 | 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 4e 74 51 75 65 72 79 53 65 63 75 72 | QuerySecurityObject.NtQuerySecur |
| 10c00 | 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 65 63 75 72 69 74 79 4f | ityObject.__imp_NtQuerySecurityO |
| 10c20 | 62 6a 65 63 74 00 5a 77 51 75 65 72 79 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f 5a 77 51 | bject.ZwQuerySemaphore.__imp_ZwQ |
| 10c40 | 75 65 72 79 53 65 6d 61 70 68 6f 72 65 00 4e 74 51 75 65 72 79 53 65 6d 61 70 68 6f 72 65 00 5f | uerySemaphore.NtQuerySemaphore._ |
| 10c60 | 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 65 6d 61 70 68 6f 72 65 00 5a 77 51 75 65 72 79 53 79 6d | _imp_NtQuerySemaphore.ZwQuerySym |
| 10c80 | 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 6d | bolicLinkObject.__imp_ZwQuerySym |
| 10ca0 | 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 4e 74 51 75 65 72 79 53 79 6d 62 6f 6c 69 63 4c | bolicLinkObject.NtQuerySymbolicL |
| 10cc0 | 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 79 6d 62 6f 6c 69 63 4c | inkObject.__imp_NtQuerySymbolicL |
| 10ce0 | 69 6e 6b 4f 62 6a 65 63 74 00 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 | inkObject.ZwQuerySystemEnvironme |
| 10d00 | 6e 74 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 | ntValue.__imp_ZwQuerySystemEnvir |
| 10d20 | 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 4e 74 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e | onmentValue.NtQuerySystemEnviron |
| 10d40 | 6d 65 6e 74 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 | mentValue.__imp_NtQuerySystemEnv |
| 10d60 | 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 | ironmentValue.ZwQuerySystemEnvir |
| 10d80 | 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 73 74 65 | onmentValueEx.__imp_ZwQuerySyste |
| 10da0 | 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 4e 74 51 75 65 72 79 53 79 73 74 65 | mEnvironmentValueEx.NtQuerySyste |
| 10dc0 | 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 | mEnvironmentValueEx.__imp_NtQuer |
| 10de0 | 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5a 77 51 75 65 72 | ySystemEnvironmentValueEx.ZwQuer |
| 10e00 | 79 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 54 69 | yTimerResolution.__imp_ZwQueryTi |
| 10e20 | 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 73 6f 6c 75 | merResolution.NtQueryTimerResolu |
| 10e40 | 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f | tion.__imp_NtQueryTimerResolutio |
| 10e60 | 6e 00 5a 77 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 52 61 69 73 65 | n.ZwRaiseException.__imp_ZwRaise |
| 10e80 | 45 78 63 65 70 74 69 6f 6e 00 4e 74 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 5f 5f 69 6d 70 | Exception.NtRaiseException.__imp |
| 10ea0 | 5f 4e 74 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 5a 77 52 61 69 73 65 48 61 72 64 45 72 72 | _NtRaiseException.ZwRaiseHardErr |
| 10ec0 | 6f 72 00 5f 5f 69 6d 70 5f 5a 77 52 61 69 73 65 48 61 72 64 45 72 72 6f 72 00 4e 74 52 61 69 73 | or.__imp_ZwRaiseHardError.NtRais |
| 10ee0 | 65 48 61 72 64 45 72 72 6f 72 00 5f 5f 69 6d 70 5f 4e 74 52 61 69 73 65 48 61 72 64 45 72 72 6f | eHardError.__imp_NtRaiseHardErro |
| 10f00 | 72 00 5a 77 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f 72 74 00 | r.ZwRegisterThreadTerminatePort. |
| 10f20 | 5f 5f 69 6d 70 5f 5a 77 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 | __imp_ZwRegisterThreadTerminateP |
| 10f40 | 6f 72 74 00 4e 74 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f 72 | ort.NtRegisterThreadTerminatePor |
| 10f60 | 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 | t.__imp_NtRegisterThreadTerminat |
| 10f80 | 65 50 6f 72 74 00 5a 77 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f | ePort.ZwReleaseKeyedEvent.__imp_ |
| 10fa0 | 5a 77 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 00 4e 74 52 65 6c 65 61 73 65 4b 65 79 | ZwReleaseKeyedEvent.NtReleaseKey |
| 10fc0 | 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e | edEvent.__imp_NtReleaseKeyedEven |
| 10fe0 | 74 00 5a 77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75 67 00 5f 5f 69 6d 70 5f 5a 77 52 | t.ZwRemoveProcessDebug.__imp_ZwR |
| 11000 | 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75 67 00 4e 74 52 65 6d 6f 76 65 50 72 6f 63 65 73 | emoveProcessDebug.NtRemoveProces |
| 11020 | 73 44 65 62 75 67 00 5f 5f 69 6d 70 5f 4e 74 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75 | sDebug.__imp_NtRemoveProcessDebu |
| 11040 | 67 00 5a 77 52 65 6e 61 6d 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 52 65 6e 61 6d 65 4b 65 79 00 | g.ZwRenameKey.__imp_ZwRenameKey. |
| 11060 | 4e 74 52 65 6e 61 6d 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 6e 61 6d 65 4b 65 79 00 5a 77 | NtRenameKey.__imp_NtRenameKey.Zw |
| 11080 | 52 65 70 6c 61 63 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 52 65 70 6c 61 63 65 4b 65 79 00 4e 74 | ReplaceKey.__imp_ZwReplaceKey.Nt |
| 110a0 | 52 65 70 6c 61 63 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 70 6c 61 63 65 4b 65 79 00 5a 77 | ReplaceKey.__imp_NtReplaceKey.Zw |
| 110c0 | 52 65 70 6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 70 6c 79 | ReplyWaitReplyPort.__imp_ZwReply |
| 110e0 | 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 4e 74 52 65 70 6c 79 57 61 69 74 52 65 70 6c 79 50 6f | WaitReplyPort.NtReplyWaitReplyPo |
| 11100 | 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 70 6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 5a 77 | rt.__imp_NtReplyWaitReplyPort.Zw |
| 11120 | 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b 65 75 70 00 5f 5f 69 6d 70 5f 5a 77 52 65 71 75 | RequestDeviceWakeup.__imp_ZwRequ |
| 11140 | 65 73 74 44 65 76 69 63 65 57 61 6b 65 75 70 00 4e 74 52 65 71 75 65 73 74 44 65 76 69 63 65 57 | estDeviceWakeup.NtRequestDeviceW |
| 11160 | 61 6b 65 75 70 00 5f 5f 69 6d 70 5f 4e 74 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b 65 75 | akeup.__imp_NtRequestDeviceWakeu |
| 11180 | 70 00 5a 77 52 65 71 75 65 73 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 71 75 65 73 74 50 | p.ZwRequestPort.__imp_ZwRequestP |
| 111a0 | 6f 72 74 00 4e 74 52 65 71 75 65 73 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 71 75 65 73 | ort.NtRequestPort.__imp_NtReques |
| 111c0 | 74 50 6f 72 74 00 5a 77 52 65 71 75 65 73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 5f 5f 69 | tPort.ZwRequestWakeupLatency.__i |
| 111e0 | 6d 70 5f 5a 77 52 65 71 75 65 73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 4e 74 52 65 71 75 | mp_ZwRequestWakeupLatency.NtRequ |
| 11200 | 65 73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 71 75 65 73 74 | estWakeupLatency.__imp_NtRequest |
| 11220 | 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 5a 77 52 65 73 65 74 45 76 65 6e 74 00 5f 5f 69 6d 70 | WakeupLatency.ZwResetEvent.__imp |
| 11240 | 5f 5a 77 52 65 73 65 74 45 76 65 6e 74 00 4e 74 52 65 73 65 74 45 76 65 6e 74 00 5f 5f 69 6d 70 | _ZwResetEvent.NtResetEvent.__imp |
| 11260 | 5f 4e 74 52 65 73 65 74 45 76 65 6e 74 00 5a 77 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68 00 | _NtResetEvent.ZwResetWriteWatch. |
| 11280 | 5f 5f 69 6d 70 5f 5a 77 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68 00 4e 74 52 65 73 65 74 57 | __imp_ZwResetWriteWatch.NtResetW |
| 112a0 | 72 69 74 65 57 61 74 63 68 00 5f 5f 69 6d 70 5f 4e 74 52 65 73 65 74 57 72 69 74 65 57 61 74 63 | riteWatch.__imp_NtResetWriteWatc |
| 112c0 | 68 00 5a 77 52 65 73 74 6f 72 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 52 65 73 74 6f 72 65 4b 65 | h.ZwRestoreKey.__imp_ZwRestoreKe |
| 112e0 | 79 00 4e 74 52 65 73 74 6f 72 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 73 74 6f 72 65 4b 65 | y.NtRestoreKey.__imp_NtRestoreKe |
| 11300 | 79 00 5a 77 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 52 65 73 75 6d 65 | y.ZwResumeProcess.__imp_ZwResume |
| 11320 | 50 72 6f 63 65 73 73 00 4e 74 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 | Process.NtResumeProcess.__imp_Nt |
| 11340 | 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 5a 77 53 61 76 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 | ResumeProcess.ZwSaveKey.__imp_Zw |
| 11360 | 53 61 76 65 4b 65 79 00 4e 74 53 61 76 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 53 61 76 65 4b 65 | SaveKey.NtSaveKey.__imp_NtSaveKe |
| 11380 | 79 00 5a 77 53 61 76 65 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 5a 77 53 61 76 65 4b 65 79 45 78 00 | y.ZwSaveKeyEx.__imp_ZwSaveKeyEx. |
| 113a0 | 4e 74 53 61 76 65 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 4e 74 53 61 76 65 4b 65 79 45 78 00 5a 77 | NtSaveKeyEx.__imp_NtSaveKeyEx.Zw |
| 113c0 | 53 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 5f 5f 69 6d 70 5f 5a 77 53 61 76 65 4d 65 72 67 65 | SaveMergedKeys.__imp_ZwSaveMerge |
| 113e0 | 64 4b 65 79 73 00 4e 74 53 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 53 | dKeys.NtSaveMergedKeys.__imp_NtS |
| 11400 | 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 5a 77 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 | aveMergedKeys.ZwSecureConnectPor |
| 11420 | 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 4e 74 53 65 | t.__imp_ZwSecureConnectPort.NtSe |
| 11440 | 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 63 75 72 65 43 6f | cureConnectPort.__imp_NtSecureCo |
| 11460 | 6e 6e 65 63 74 50 6f 72 74 00 5a 77 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f | nnectPort.ZwSetBootEntryOrder.__ |
| 11480 | 69 6d 70 5f 5a 77 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 4e 74 53 65 74 42 6f 6f | imp_ZwSetBootEntryOrder.NtSetBoo |
| 114a0 | 74 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 42 6f 6f 74 45 6e 74 72 79 | tEntryOrder.__imp_NtSetBootEntry |
| 114c0 | 4f 72 64 65 72 00 5a 77 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 5a 77 53 | Order.ZwSetBootOptions.__imp_ZwS |
| 114e0 | 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 4e 74 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 5f | etBootOptions.NtSetBootOptions._ |
| 11500 | 5f 69 6d 70 5f 4e 74 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 5a 77 53 65 74 43 6f 6e 74 65 | _imp_NtSetBootOptions.ZwSetConte |
| 11520 | 78 74 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 | xtThread.__imp_ZwSetContextThrea |
| 11540 | 64 00 4e 74 53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 | d.NtSetContextThread.__imp_NtSet |
| 11560 | 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 5a 77 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 | ContextThread.ZwSetDebugFilterSt |
| 11580 | 61 74 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 | ate.__imp_ZwSetDebugFilterState. |
| 115a0 | 4e 74 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 | NtSetDebugFilterState.__imp_NtSe |
| 115c0 | 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5a 77 53 65 74 44 65 66 61 75 6c 74 48 61 | tDebugFilterState.ZwSetDefaultHa |
| 115e0 | 72 64 45 72 72 6f 72 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 44 65 66 61 75 6c 74 48 61 | rdErrorPort.__imp_ZwSetDefaultHa |
| 11600 | 72 64 45 72 72 6f 72 50 6f 72 74 00 4e 74 53 65 74 44 65 66 61 75 6c 74 48 61 72 64 45 72 72 6f | rdErrorPort.NtSetDefaultHardErro |
| 11620 | 72 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 65 66 61 75 6c 74 48 61 72 64 45 72 72 6f | rPort.__imp_NtSetDefaultHardErro |
| 11640 | 72 50 6f 72 74 00 5a 77 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5f 5f 69 6d 70 5f 5a | rPort.ZwSetDefaultLocale.__imp_Z |
| 11660 | 77 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 4e 74 53 65 74 44 65 66 61 75 6c 74 4c 6f | wSetDefaultLocale.NtSetDefaultLo |
| 11680 | 63 61 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5a 77 | cale.__imp_NtSetDefaultLocale.Zw |
| 116a0 | 53 65 74 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 | SetDefaultUILanguage.__imp_ZwSet |
| 116c0 | 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 4e 74 53 65 74 44 65 66 61 75 6c 74 55 49 | DefaultUILanguage.NtSetDefaultUI |
| 116e0 | 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 65 66 61 75 6c 74 55 49 4c 61 6e | Language.__imp_NtSetDefaultUILan |
| 11700 | 67 75 61 67 65 00 5a 77 53 65 74 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d | guage.ZwSetDriverEntryOrder.__im |
| 11720 | 70 5f 5a 77 53 65 74 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 4e 74 53 65 74 44 72 69 | p_ZwSetDriverEntryOrder.NtSetDri |
| 11740 | 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 72 69 76 65 72 45 | verEntryOrder.__imp_NtSetDriverE |
| 11760 | 6e 74 72 79 4f 72 64 65 72 00 5a 77 53 65 74 45 61 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 | ntryOrder.ZwSetEaFile.__imp_ZwSe |
| 11780 | 74 45 61 46 69 6c 65 00 4e 74 53 65 74 45 61 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 45 | tEaFile.NtSetEaFile.__imp_NtSetE |
| 117a0 | 61 46 69 6c 65 00 5a 77 53 65 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a | aFile.ZwSetHighEventPair.__imp_Z |
| 117c0 | 77 53 65 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 4e 74 53 65 74 48 69 67 68 45 76 65 6e 74 | wSetHighEventPair.NtSetHighEvent |
| 117e0 | 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5a 77 | Pair.__imp_NtSetHighEventPair.Zw |
| 11800 | 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 | SetHighWaitLowEventPair.__imp_Zw |
| 11820 | 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 4e 74 53 65 74 48 69 67 | SetHighWaitLowEventPair.NtSetHig |
| 11840 | 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 48 69 67 | hWaitLowEventPair.__imp_NtSetHig |
| 11860 | 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 | hWaitLowEventPair.ZwSetInformati |
| 11880 | 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 | onDebugObject.__imp_ZwSetInforma |
| 118a0 | 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e | tionDebugObject.NtSetInformation |
| 118c0 | 44 65 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 | DebugObject.__imp_NtSetInformati |
| 118e0 | 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f | onDebugObject.ZwSetInformationJo |
| 11900 | 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f | bObject.__imp_ZwSetInformationJo |
| 11920 | 62 4f 62 6a 65 63 74 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 | bObject.NtSetInformationJobObjec |
| 11940 | 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 | t.__imp_NtSetInformationJobObjec |
| 11960 | 74 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 53 65 | t.ZwSetInformationKey.__imp_ZwSe |
| 11980 | 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65 79 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e | tInformationKey.NtSetInformation |
| 119a0 | 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65 79 00 5a 77 | Key.__imp_NtSetInformationKey.Zw |
| 119c0 | 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 | SetInformationToken.__imp_ZwSetI |
| 119e0 | 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e | nformationToken.NtSetInformation |
| 11a00 | 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 | Token.__imp_NtSetInformationToke |
| 11a20 | 6e 00 5a 77 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 | n.ZwSetIntervalProfile.__imp_ZwS |
| 11a40 | 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 4e 74 53 65 74 49 6e 74 65 72 76 61 6c 50 | etIntervalProfile.NtSetIntervalP |
| 11a60 | 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c | rofile.__imp_NtSetIntervalProfil |
| 11a80 | 65 00 5a 77 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 | e.ZwSetIoCompletion.__imp_ZwSetI |
| 11aa0 | 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 4e 74 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f | oCompletion.NtSetIoCompletion.__ |
| 11ac0 | 69 6d 70 5f 4e 74 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 53 65 74 4c 64 74 45 6e | imp_NtSetIoCompletion.ZwSetLdtEn |
| 11ae0 | 74 72 69 65 73 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 4c 64 74 45 6e 74 72 69 65 73 00 4e 74 53 65 | tries.__imp_ZwSetLdtEntries.NtSe |
| 11b00 | 74 4c 64 74 45 6e 74 72 69 65 73 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 4c 64 74 45 6e 74 72 69 65 | tLdtEntries.__imp_NtSetLdtEntrie |
| 11b20 | 73 00 5a 77 53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 4c | s.ZwSetLowEventPair.__imp_ZwSetL |
| 11b40 | 6f 77 45 76 65 6e 74 50 61 69 72 00 4e 74 53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f | owEventPair.NtSetLowEventPair.__ |
| 11b60 | 69 6d 70 5f 4e 74 53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5a 77 53 65 74 4c 6f 77 57 61 | imp_NtSetLowEventPair.ZwSetLowWa |
| 11b80 | 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 4c 6f 77 57 61 | itHighEventPair.__imp_ZwSetLowWa |
| 11ba0 | 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 4e 74 53 65 74 4c 6f 77 57 61 69 74 48 69 67 68 | itHighEventPair.NtSetLowWaitHigh |
| 11bc0 | 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 4c 6f 77 57 61 69 74 48 69 67 68 | EventPair.__imp_NtSetLowWaitHigh |
| 11be0 | 45 76 65 6e 74 50 61 69 72 00 5a 77 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 | EventPair.ZwSetQuotaInformationF |
| 11c00 | 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 | ile.__imp_ZwSetQuotaInformationF |
| 11c20 | 69 6c 65 00 4e 74 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f | ile.NtSetQuotaInformationFile.__ |
| 11c40 | 69 6d 70 5f 4e 74 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 | imp_NtSetQuotaInformationFile.Zw |
| 11c60 | 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 65 63 | SetSecurityObject.__imp_ZwSetSec |
| 11c80 | 75 72 69 74 79 4f 62 6a 65 63 74 00 4e 74 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 | urityObject.NtSetSecurityObject. |
| 11ca0 | 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5a 77 53 65 74 53 | __imp_NtSetSecurityObject.ZwSetS |
| 11cc0 | 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 | ystemEnvironmentValue.__imp_ZwSe |
| 11ce0 | 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 4e 74 53 65 74 53 79 73 | tSystemEnvironmentValue.NtSetSys |
| 11d00 | 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 | temEnvironmentValue.__imp_NtSetS |
| 11d20 | 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5a 77 53 65 74 53 79 73 74 65 | ystemEnvironmentValue.ZwSetSyste |
| 11d40 | 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 | mEnvironmentValueEx.__imp_ZwSetS |
| 11d60 | 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 4e 74 53 65 74 53 79 73 | ystemEnvironmentValueEx.NtSetSys |
| 11d80 | 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5f 5f 69 6d 70 5f 4e 74 53 65 | temEnvironmentValueEx.__imp_NtSe |
| 11da0 | 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5a 77 53 65 74 53 | tSystemEnvironmentValueEx.ZwSetS |
| 11dc0 | 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 79 73 74 | ystemInformation.__imp_ZwSetSyst |
| 11de0 | 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4e 74 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 | emInformation.NtSetSystemInforma |
| 11e00 | 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f | tion.__imp_NtSetSystemInformatio |
| 11e20 | 6e 00 5a 77 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 5a 77 | n.ZwSetSystemPowerState.__imp_Zw |
| 11e40 | 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 53 74 61 74 65 00 4e 74 53 65 74 53 79 73 74 65 6d 50 | SetSystemPowerState.NtSetSystemP |
| 11e60 | 6f 77 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 | owerState.__imp_NtSetSystemPower |
| 11e80 | 53 74 61 74 65 00 5a 77 53 65 74 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 | State.ZwSetSystemTime.__imp_ZwSe |
| 11ea0 | 74 53 79 73 74 65 6d 54 69 6d 65 00 4e 74 53 65 74 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d | tSystemTime.NtSetSystemTime.__im |
| 11ec0 | 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 54 69 6d 65 00 5a 77 53 65 74 54 68 72 65 61 64 45 78 65 | p_NtSetSystemTime.ZwSetThreadExe |
| 11ee0 | 63 75 74 69 6f 6e 53 74 61 74 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 54 68 72 65 61 64 45 78 65 | cutionState.__imp_ZwSetThreadExe |
| 11f00 | 63 75 74 69 6f 6e 53 74 61 74 65 00 4e 74 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e | cutionState.NtSetThreadExecution |
| 11f20 | 53 74 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e | State.__imp_NtSetThreadExecution |
| 11f40 | 53 74 61 74 65 00 5a 77 53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 5f 5f 69 6d 70 | State.ZwSetTimerResolution.__imp |
| 11f60 | 5f 5a 77 53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 4e 74 53 65 74 54 69 6d 65 72 | _ZwSetTimerResolution.NtSetTimer |
| 11f80 | 52 65 73 6f 6c 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 54 69 6d 65 72 52 65 73 6f 6c | Resolution.__imp_NtSetTimerResol |
| 11fa0 | 75 74 69 6f 6e 00 5a 77 53 65 74 55 75 69 64 53 65 65 64 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 55 | ution.ZwSetUuidSeed.__imp_ZwSetU |
| 11fc0 | 75 69 64 53 65 65 64 00 4e 74 53 65 74 55 75 69 64 53 65 65 64 00 5f 5f 69 6d 70 5f 4e 74 53 65 | uidSeed.NtSetUuidSeed.__imp_NtSe |
| 11fe0 | 74 55 75 69 64 53 65 65 64 00 5a 77 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e | tUuidSeed.ZwSetVolumeInformation |
| 12000 | 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f | File.__imp_ZwSetVolumeInformatio |
| 12020 | 6e 46 69 6c 65 00 4e 74 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 | nFile.NtSetVolumeInformationFile |
| 12040 | 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c | .__imp_NtSetVolumeInformationFil |
| 12060 | 65 00 5a 77 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 00 5f 5f 69 6d 70 5f 5a 77 53 68 75 74 64 | e.ZwShutdownSystem.__imp_ZwShutd |
| 12080 | 6f 77 6e 53 79 73 74 65 6d 00 4e 74 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 00 5f 5f 69 6d 70 | ownSystem.NtShutdownSystem.__imp |
| 120a0 | 5f 4e 74 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 00 5a 77 53 69 67 6e 61 6c 41 6e 64 57 61 69 | _NtShutdownSystem.ZwSignalAndWai |
| 120c0 | 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 69 67 6e 61 6c 41 | tForSingleObject.__imp_ZwSignalA |
| 120e0 | 6e 64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 4e 74 53 69 67 6e 61 6c 41 6e | ndWaitForSingleObject.NtSignalAn |
| 12100 | 64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 53 69 67 | dWaitForSingleObject.__imp_NtSig |
| 12120 | 6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 5a 77 53 74 61 72 | nalAndWaitForSingleObject.ZwStar |
| 12140 | 74 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 74 61 72 74 50 72 6f 66 69 6c 65 00 4e 74 | tProfile.__imp_ZwStartProfile.Nt |
| 12160 | 53 74 61 72 74 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 74 61 72 74 50 72 6f 66 69 6c | StartProfile.__imp_NtStartProfil |
| 12180 | 65 00 5a 77 53 74 6f 70 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 74 6f 70 50 72 6f 66 | e.ZwStopProfile.__imp_ZwStopProf |
| 121a0 | 69 6c 65 00 4e 74 53 74 6f 70 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 74 6f 70 50 72 | ile.NtStopProfile.__imp_NtStopPr |
| 121c0 | 6f 66 69 6c 65 00 5a 77 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 53 | ofile.ZwSuspendProcess.__imp_ZwS |
| 121e0 | 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 4e 74 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 5f | uspendProcess.NtSuspendProcess._ |
| 12200 | 5f 69 6d 70 5f 4e 74 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 5a 77 53 75 73 70 65 6e 64 54 | _imp_NtSuspendProcess.ZwSuspendT |
| 12220 | 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 53 75 73 70 65 6e 64 54 68 72 65 61 64 00 4e 74 53 75 | hread.__imp_ZwSuspendThread.NtSu |
| 12240 | 73 70 65 6e 64 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 53 75 73 70 65 6e 64 54 68 72 65 61 | spendThread.__imp_NtSuspendThrea |
| 12260 | 64 00 5a 77 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 5a 77 53 | d.ZwSystemDebugControl.__imp_ZwS |
| 12280 | 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 00 4e 74 53 79 73 74 65 6d 44 65 62 75 67 43 | ystemDebugControl.NtSystemDebugC |
| 122a0 | 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 4e 74 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f | ontrol.__imp_NtSystemDebugContro |
| 122c0 | 6c 00 5a 77 54 65 72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 54 | l.ZwTerminateJobObject.__imp_ZwT |
| 122e0 | 65 72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 4e 74 54 65 72 6d 69 6e 61 74 65 4a 6f 62 | erminateJobObject.NtTerminateJob |
| 12300 | 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 54 65 72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 | Object.__imp_NtTerminateJobObjec |
| 12320 | 74 00 5a 77 54 65 73 74 41 6c 65 72 74 00 5f 5f 69 6d 70 5f 5a 77 54 65 73 74 41 6c 65 72 74 00 | t.ZwTestAlert.__imp_ZwTestAlert. |
| 12340 | 4e 74 54 65 73 74 41 6c 65 72 74 00 5f 5f 69 6d 70 5f 4e 74 54 65 73 74 41 6c 65 72 74 00 5a 77 | NtTestAlert.__imp_NtTestAlert.Zw |
| 12360 | 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 00 5f 5f 69 6d 70 5f 5a 77 54 72 61 6e 73 6c | TranslateFilePath.__imp_ZwTransl |
| 12380 | 61 74 65 46 69 6c 65 50 61 74 68 00 4e 74 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 00 | ateFilePath.NtTranslateFilePath. |
| 123a0 | 5f 5f 69 6d 70 5f 4e 74 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 00 5a 77 55 6e 6c 6f | __imp_NtTranslateFilePath.ZwUnlo |
| 123c0 | 61 64 44 72 69 76 65 72 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 61 64 44 72 69 76 65 72 00 4e 74 | adDriver.__imp_ZwUnloadDriver.Nt |
| 123e0 | 55 6e 6c 6f 61 64 44 72 69 76 65 72 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 61 64 44 72 69 76 65 | UnloadDriver.__imp_NtUnloadDrive |
| 12400 | 72 00 5a 77 55 6e 6c 6f 61 64 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 00 | r.ZwUnloadKey.__imp_ZwUnloadKey. |
| 12420 | 4e 74 55 6e 6c 6f 61 64 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 00 5a 77 | NtUnloadKey.__imp_NtUnloadKey.Zw |
| 12440 | 55 6e 6c 6f 61 64 4b 65 79 32 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 32 00 4e 74 | UnloadKey2.__imp_ZwUnloadKey2.Nt |
| 12460 | 55 6e 6c 6f 61 64 4b 65 79 32 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 32 00 5a 77 | UnloadKey2.__imp_NtUnloadKey2.Zw |
| 12480 | 55 6e 6c 6f 61 64 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 45 78 00 | UnloadKeyEx.__imp_ZwUnloadKeyEx. |
| 124a0 | 4e 74 55 6e 6c 6f 61 64 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 45 | NtUnloadKeyEx.__imp_NtUnloadKeyE |
| 124c0 | 78 00 5a 77 55 6e 6c 6f 63 6b 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 63 6b 46 69 6c | x.ZwUnlockFile.__imp_ZwUnlockFil |
| 124e0 | 65 00 4e 74 55 6e 6c 6f 63 6b 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 63 6b 46 69 6c | e.NtUnlockFile.__imp_NtUnlockFil |
| 12500 | 65 00 5a 77 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 | e.ZwUnlockVirtualMemory.__imp_Zw |
| 12520 | 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 | UnlockVirtualMemory.NtUnlockVirt |
| 12540 | 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d | ualMemory.__imp_NtUnlockVirtualM |
| 12560 | 65 6d 6f 72 79 00 5a 77 56 64 6d 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 5a 77 56 64 6d 43 6f | emory.ZwVdmControl.__imp_ZwVdmCo |
| 12580 | 6e 74 72 6f 6c 00 4e 74 56 64 6d 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 4e 74 56 64 6d 43 6f | ntrol.NtVdmControl.__imp_NtVdmCo |
| 125a0 | 6e 74 72 6f 6c 00 5a 77 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e 74 00 5f 5f 69 6d 70 5f | ntrol.ZwWaitForDebugEvent.__imp_ |
| 125c0 | 5a 77 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e 74 00 4e 74 57 61 69 74 46 6f 72 44 65 62 | ZwWaitForDebugEvent.NtWaitForDeb |
| 125e0 | 75 67 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e | ugEvent.__imp_NtWaitForDebugEven |
| 12600 | 74 00 5a 77 57 61 69 74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 57 61 | t.ZwWaitForKeyedEvent.__imp_ZwWa |
| 12620 | 69 74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74 00 4e 74 57 61 69 74 46 6f 72 4b 65 79 65 64 45 76 | itForKeyedEvent.NtWaitForKeyedEv |
| 12640 | 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74 00 5a 77 | ent.__imp_NtWaitForKeyedEvent.Zw |
| 12660 | 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 48 69 | WaitHighEventPair.__imp_ZwWaitHi |
| 12680 | 67 68 45 76 65 6e 74 50 61 69 72 00 4e 74 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 | ghEventPair.NtWaitHighEventPair. |
| 126a0 | 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5a 77 57 61 69 74 | __imp_NtWaitHighEventPair.ZwWait |
| 126c0 | 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 4c 6f 77 45 76 65 6e | LowEventPair.__imp_ZwWaitLowEven |
| 126e0 | 74 50 61 69 72 00 4e 74 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e | tPair.NtWaitLowEventPair.__imp_N |
| 12700 | 74 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 | tWaitLowEventPair./............. |
| 12720 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 12740 | 20 20 37 35 34 38 30 20 20 20 20 20 60 0a 60 05 00 00 26 4e 02 00 48 50 02 00 7e 51 02 00 88 5e | ..75480.....`.`...&N..HP..~Q...^ |
| 12760 | 02 00 80 62 02 00 f4 5e 02 00 12 62 02 00 d8 5f 02 00 4a 60 02 00 9e 61 02 00 30 61 02 00 be 60 | ...b...^...b..._..J`...a..0a...` |
| 12780 | 02 00 5c 5f 02 00 9a 5b 02 00 02 5c 02 00 66 5c 02 00 5c 9e 04 00 c2 9e 04 00 cc 5c 02 00 3e 5d | ..\_...[...\..f\..\........\..>] |
| 127a0 | 02 00 f0 62 02 00 16 5e 02 00 a2 5d 02 00 0c 72 02 00 7a 72 02 00 ee 72 02 00 92 71 02 00 da 73 | ...b...^...]...r..zr...r...q...s |
| 127c0 | 02 00 f8 76 02 00 8c 76 02 00 e4 77 02 00 3a 79 02 00 cc 78 02 00 56 78 02 00 22 7a 02 00 8c 7a | ...v...v...w..:y...x..Vx.."z...z |
| 127e0 | 02 00 e0 7b 02 00 46 74 02 00 f8 7a 02 00 6e 7b 02 00 c2 7c 02 00 aa 7d 02 00 f2 7e 02 00 4e 82 | ...{..Ft...z..n{...|...}...~..N. |
| 12800 | 02 00 10 7e 02 00 ce 81 02 00 c0 82 02 00 2e 83 02 00 16 84 02 00 7e 84 02 00 12 76 02 00 4e 7c | ...~..................~....v..N| |
| 12820 | 02 00 ce 85 02 00 3a 86 02 00 64 85 02 00 4c 06 03 00 b4 06 03 00 1c 07 03 00 86 07 03 00 f0 07 | ......:...d...L................. |
| 12840 | 03 00 58 08 03 00 ce 08 03 00 3a 09 03 00 a8 09 03 00 1e 0a 03 00 84 0b 03 00 06 0c 03 00 78 0c | ..X.......:...................x. |
| 12860 | 03 00 ec 0c 03 00 64 0d 03 00 d4 0d 03 00 46 0e 03 00 ce 11 03 00 bc 0e 03 00 20 0f 03 00 8e 0f | ......d.......F................. |
| 12880 | 03 00 fe 0f 03 00 76 10 03 00 e6 10 03 00 58 11 03 00 80 14 03 00 f4 14 03 00 62 15 03 00 de 15 | ......v.......X...........b..... |
| 128a0 | 03 00 54 16 03 00 c0 16 03 00 2a 17 03 00 9e 17 03 00 14 18 03 00 8c 18 03 00 6e 19 03 00 5a 1a | ..T.......*...............n...Z. |
| 128c0 | 03 00 e0 19 03 00 ce 1a 03 00 44 1b 03 00 ac 1b 03 00 1c 1c 03 00 90 1c 03 00 04 1d 03 00 6e 1d | ..........D...................n. |
| 128e0 | 03 00 d6 1d 03 00 84 1f 03 00 f0 1f 03 00 6e 20 03 00 e2 20 03 00 50 21 03 00 ba 21 03 00 02 23 | ..............n.......P!...!...# |
| 12900 | 03 00 6c 23 03 00 d8 23 03 00 48 24 03 00 b4 24 03 00 26 25 03 00 92 25 03 00 fc 25 03 00 60 27 | ..l#...#..H$...$..&%...%...%..`' |
| 12920 | 03 00 d6 27 03 00 4c 28 03 00 44 29 03 00 c4 28 03 00 b8 29 03 00 1e 2a 03 00 96 2a 03 00 cc 2c | ...'..L(..D)...(...)...*...*..., |
| 12940 | 03 00 40 2d 03 00 a6 2d 03 00 1e 2e 03 00 86 2e 03 00 f6 2e 03 00 d4 2f 03 00 40 30 03 00 24 31 | ..@-...-.............../..@0..$1 |
| 12960 | 03 00 94 31 03 00 fc 31 03 00 e6 32 03 00 56 33 03 00 92 35 03 00 04 36 03 00 80 36 03 00 f0 36 | ...1...1...2..V3...5...6...6...6 |
| 12980 | 03 00 66 37 03 00 e0 55 03 00 aa 39 03 00 7a 3b 03 00 e8 3b 03 00 58 3c 03 00 c2 3c 03 00 dc 3f | ..f7...U...9..z;...;..X<...<...? |
| 129a0 | 03 00 26 3d 03 00 8e 3d 03 00 04 3e 03 00 78 3e 03 00 f0 3e 03 00 48 40 03 00 ba 40 03 00 26 41 | ..&=...=...>..x>...>..H@...@..&A |
| 129c0 | 03 00 ba 38 03 00 ba 43 03 00 28 44 03 00 98 44 03 00 08 45 03 00 72 45 03 00 5e 46 03 00 d6 46 | ...8...C..(D...D...E..rE..^F...F |
| 129e0 | 03 00 c2 47 03 00 2c 49 03 00 2e 4a 03 00 b4 48 03 00 ae 49 03 00 88 a2 03 00 b8 4a 03 00 26 4b | ...G..,I...J...H...I.......J..&K |
| 12a00 | 03 00 96 4b 03 00 08 4c 03 00 7c 4c 03 00 e6 4c 03 00 5a 4d 03 00 4c 4e 03 00 9c 3a 03 00 b8 4e | ...K...L..|L...L..ZM..LN...:...N |
| 12a20 | 03 00 08 3b 03 00 c6 4d 03 00 2a 4f 03 00 a0 8f 03 00 16 90 03 00 fe 67 03 00 0a 50 03 00 7e 50 | ...;...M..*O...........g...P..~P |
| 12a40 | 03 00 f4 50 03 00 76 51 03 00 f8 51 03 00 9c 4f 03 00 7e 52 03 00 ee 52 03 00 5c 53 03 00 c4 53 | ...P..vQ...Q...O..~R...R..\S...S |
| 12a60 | 03 00 30 54 03 00 96 54 03 00 00 55 03 00 70 55 03 00 4c 56 03 00 2c 57 03 00 14 59 03 00 8a 59 | ..0T...T...U..pU..LV..,W...Y...Y |
| 12a80 | 03 00 f6 59 03 00 68 5a 03 00 c0 5b 03 00 d4 5a 03 00 10 5d 03 00 32 5c 03 00 86 5d 03 00 f0 5d | ...Y..hZ...[...Z...]..2\...]...] |
| 12aa0 | 03 00 d0 5e 03 00 24 60 03 00 90 60 03 00 ae 5f 03 00 fe 60 03 00 76 61 03 00 e2 61 03 00 4a 62 | ...^..$`...`..._...`..va...a..Jb |
| 12ac0 | 03 00 b0 62 03 00 1c 63 03 00 00 64 03 00 70 64 03 00 4e 65 03 00 be 65 03 00 0a 67 03 00 84 67 | ...b...c...d..pd..Ne...e...g...g |
| 12ae0 | 03 00 a6 c1 03 00 c2 c0 03 00 fa c3 03 00 7c 68 03 00 5c 69 03 00 08 cd 03 00 d4 69 03 00 4c 6a | ..............|h..\i.......i..Lj |
| 12b00 | 03 00 c0 6a 03 00 38 6b 03 00 ce 6f 03 00 22 71 03 00 e2 64 03 00 9e 6b 03 00 0e 6c 03 00 f8 6c | ...j..8k...o.."q...d...k...l...l |
| 12b20 | 03 00 70 6d 03 00 de 6d 03 00 5a 6f 03 00 c2 74 03 00 50 74 03 00 46 70 03 00 b4 70 03 00 94 71 | ..pm...m..Zo...t..Pt..Fp...p...q |
| 12b40 | 03 00 7a 72 03 00 f2 72 03 00 e0 73 03 00 30 75 03 00 08 76 03 00 7c 76 03 00 f4 76 03 00 60 77 | ..zr...r...s..0u...v..|v...v..`w |
| 12b60 | 03 00 ce 77 03 00 3e 78 03 00 a8 78 03 00 16 79 03 00 82 79 03 00 fe 7c 03 00 72 7d 03 00 e0 7d | ...w..>x...x...y...y...|..r}...} |
| 12b80 | 03 00 50 7e 03 00 c8 7e 03 00 20 c2 03 00 4c 7f 03 00 c0 7f 03 00 38 80 03 00 1a 81 03 00 ac 80 | ..P~...~......L.......8......... |
| 12ba0 | 03 00 fc 81 03 00 8a 81 03 00 b4 7b 03 00 1c 7c 03 00 8c 7c 03 00 68 82 03 00 e0 82 03 00 5a 83 | ...........{...|...|..h.......Z. |
| 12bc0 | 03 00 d6 83 03 00 40 85 03 00 ac 85 03 00 20 86 03 00 94 86 03 00 0a 87 03 00 dc aa 03 00 82 87 | ......@......................... |
| 12be0 | 03 00 62 5e 03 00 ce 84 03 00 f8 87 03 00 52 89 03 00 6a 88 03 00 de 88 03 00 c4 89 03 00 1e 8b | ..b^..........R...j............. |
| 12c00 | 03 00 36 8a 03 00 aa 8a 03 00 90 8b 03 00 ea 8c 03 00 02 8c 03 00 76 8c 03 00 5c 8d 03 00 b6 8e | ..6...................v...\..... |
| 12c20 | 03 00 ce 8d 03 00 42 8e 03 00 94 90 03 00 04 91 03 00 76 91 03 00 ea 91 03 00 42 93 03 00 ae 93 | ......B...........v.......B..... |
| 12c40 | 03 00 1e 94 03 00 8e 94 03 00 00 95 03 00 70 95 03 00 e6 95 03 00 32 97 03 00 7c 98 03 00 f0 98 | ..............p.......2...|..... |
| 12c60 | 03 00 68 99 03 00 e2 99 03 00 5e 9a 03 00 c0 9b 03 00 30 9c 03 00 9c 9c 03 00 14 9d 03 00 e8 26 | ..h.......^.......0............& |
| 12c80 | 03 00 f8 9d 03 00 6a 9e 03 00 de 9e 03 00 50 9f 03 00 be 9f 03 00 36 a0 03 00 ac a0 03 00 1c a1 | ......j.......P.......6......... |
| 12ca0 | 03 00 8e a1 03 00 14 a2 03 00 fe a2 03 00 6e a3 03 00 e4 a3 03 00 5c a4 03 00 d8 a4 03 00 48 a5 | ..............n.......\.......H. |
| 12cc0 | 03 00 b6 a5 03 00 2a a6 03 00 a0 a6 03 00 0c a7 03 00 7a a7 03 00 ce ef 03 00 38 f0 03 00 a8 f0 | ......*...........z.......8..... |
| 12ce0 | 03 00 1a f1 03 00 82 f1 03 00 f0 f1 03 00 e6 a7 03 00 56 a8 03 00 bc a8 03 00 26 a9 03 00 02 aa | ..................V.......&..... |
| 12d00 | 03 00 d4 b1 03 00 6a aa 03 00 4a ab 03 00 c2 ab 03 00 34 ac 03 00 10 b0 03 00 82 b0 03 00 5e b1 | ......j...J.......4...........^. |
| 12d20 | 03 00 b2 b2 03 00 1e b3 03 00 88 b3 03 00 ec b3 03 00 52 b4 03 00 a6 b5 03 00 14 b6 03 00 52 b8 | ..................R...........R. |
| 12d40 | 03 00 be b8 03 00 2c b9 03 00 9e b9 03 00 0c ba 03 00 4a bc 03 00 2e bd 03 00 a2 bd 03 00 16 be | ......,...........J............. |
| 12d60 | 03 00 8a be 03 00 6c bf 03 00 e2 bf 03 00 5a c0 03 00 40 c1 03 00 9a c2 03 00 0e c3 03 00 82 c3 | ......l.......Z...@............. |
| 12d80 | 03 00 6e c4 03 00 e2 c4 03 00 5a c5 03 00 b0 c6 03 00 20 c7 03 00 60 ce 03 00 f2 cd 03 00 ca c5 | ..n.......Z...........`......... |
| 12da0 | 03 00 18 c8 03 00 90 c8 03 00 02 c9 03 00 7a c9 03 00 f6 c9 03 00 66 ca 03 00 d8 ca 03 00 48 cb | ..............z.......f.......H. |
| 12dc0 | 03 00 2e cc 03 00 ce ce 03 00 34 cf 03 00 98 cf 03 00 6e d0 03 00 da d0 03 00 4c d1 03 00 ba d1 | ..........4.......n.......L..... |
| 12de0 | 03 00 2a d2 03 00 7a d3 03 00 0c d3 03 00 f0 d3 03 00 64 d4 03 00 d8 d4 03 00 b4 d5 03 00 26 d6 | ..*...z...........d...........&. |
| 12e00 | 03 00 5e d8 03 00 46 d5 03 00 0c d7 03 00 98 d6 03 00 7c d7 03 00 ec d7 03 00 d2 d8 03 00 48 d9 | ..^...F...........|...........H. |
| 12e20 | 03 00 be d9 03 00 36 da 03 00 ac da 03 00 a2 db 03 00 16 dc 03 00 8a dc 03 00 24 db 03 00 70 dd | ......6...................$...p. |
| 12e40 | 03 00 56 de 03 00 e2 dd 03 00 c2 de 03 00 9a df 03 00 78 e0 03 00 42 e1 03 00 b2 e1 03 00 24 e2 | ..V...............x...B.......$. |
| 12e60 | 03 00 26 e3 03 00 a2 e2 03 00 18 e4 03 00 90 e4 03 00 6c e5 03 00 d4 e5 03 00 a6 e6 03 00 42 e9 | ..&...............l...........B. |
| 12e80 | 03 00 8a e7 03 00 0c e7 03 00 00 e8 03 00 b6 e9 03 00 92 ea 03 00 fe ea 03 00 64 eb 03 00 da eb | ..........................d..... |
| 12ea0 | 03 00 c2 ec 03 00 46 f3 03 00 bc f3 03 00 32 f4 03 00 a8 f4 03 00 32 ed 03 00 98 ed 03 00 98 d2 | ......F.......2.......2......... |
| 12ec0 | 03 00 4e 96 03 00 2a 58 02 00 bc 57 02 00 fe 54 02 00 9e 58 02 00 72 55 02 00 e6 55 02 00 de 56 | ..N...*X...W...T...X..rU...U...V |
| 12ee0 | 02 00 58 56 02 00 50 57 02 00 c0 5a 02 00 56 5a 02 00 ee 59 02 00 78 59 02 00 2c 5b 02 00 0e 59 | ..XV..PW...Z..VZ...Y..xY..,[...Y |
| 12f00 | 02 00 44 38 03 00 c4 56 03 00 3e e6 03 00 4e 34 03 00 f4 b0 03 00 0c 72 03 00 72 32 03 00 e8 45 | ..D8...V..>...N4.......r..r2...E |
| 12f20 | 03 00 a2 ae 03 00 3a 5f 03 00 80 b6 03 00 12 87 04 00 72 9c 04 00 ce 94 04 00 f4 88 04 00 94 88 | ......:_..........r............. |
| 12f40 | 04 00 b2 89 04 00 02 91 04 00 10 94 04 00 8e 95 04 00 b4 86 04 00 52 89 04 00 a2 90 04 00 58 ef | ......................R.......X. |
| 12f60 | 03 00 d0 f2 03 00 5c f2 03 00 5c 92 03 00 9a 66 03 00 0c 98 03 00 a4 1e 03 00 10 1f 03 00 66 e8 | ......\...\....f..............f. |
| 12f80 | 03 00 d0 e8 03 00 96 af 03 00 24 ae 03 00 1c af 03 00 52 81 02 00 7c 7e 02 00 dc 80 02 00 e2 7f | ..........$.......R...|~........ |
| 12fa0 | 02 00 5e 80 02 00 ce 7a 03 00 6c bb 03 00 d4 37 03 00 00 dd 03 00 a2 e3 03 00 f0 79 03 00 6e 7f | ..^....z..l....7...........y..n. |
| 12fc0 | 02 00 ec 84 02 00 1e f5 03 00 8e 13 03 00 74 ba 03 00 06 14 03 00 f0 ba 03 00 3a 98 04 00 76 97 | ..............t...........:...v. |
| 12fe0 | 04 00 e8 9a 04 00 b2 96 04 00 24 9a 04 00 86 9a 04 00 d8 97 04 00 c2 99 04 00 50 96 04 00 14 97 | ..........$...............P..... |
| 13000 | 04 00 fe 98 04 00 9c 98 04 00 60 99 04 00 4a 9b 04 00 ac 9b 04 00 f2 7e 04 00 8e 7e 04 00 54 7f | ..........`...J........~...~..T. |
| 13020 | 04 00 2a 7e 04 00 b8 7f 04 00 32 9d 04 00 d0 9c 04 00 94 9d 04 00 f8 9d 04 00 80 a1 04 00 bc a0 | ..*~......2..................... |
| 13040 | 04 00 2e a4 04 00 f8 9f 04 00 90 a4 04 00 56 a5 04 00 ca 84 04 00 6a a3 04 00 1e a1 04 00 08 a3 | ..............V.......j......... |
| 13060 | 04 00 96 9f 04 00 5a a0 04 00 cc a3 04 00 44 a2 04 00 e2 a1 04 00 a6 a2 04 00 30 85 04 00 04 84 | ......Z.......D...........0..... |
| 13080 | 04 00 a0 83 04 00 66 84 04 00 6c 7b 04 00 c2 91 04 00 f2 a4 04 00 26 92 04 00 ae 93 04 00 ea 92 | ......f...l{..........&......... |
| 130a0 | 04 00 4c 93 04 00 88 92 04 00 d0 7b 04 00 2c 95 04 00 fa 7c 04 00 0e 9c 04 00 5e 7d 04 00 32 9f | ..L........{..,....|......^}..2. |
| 130c0 | 04 00 d4 82 04 00 6e 82 04 00 ee 95 04 00 6e 94 04 00 d2 87 04 00 54 86 04 00 72 87 04 00 92 85 | ......n.......n.......T...r..... |
| 130e0 | 04 00 98 77 04 00 f2 85 04 00 22 79 04 00 82 79 04 00 5e 78 04 00 c0 78 04 00 ac 7a 04 00 0c 7b | ...w......"y...y..^x...x...z...{ |
| 13100 | 04 00 aa 81 04 00 e2 80 04 00 0c 82 04 00 c4 7d 04 00 84 8d 04 00 fc 8b 04 00 38 8b 04 00 74 8a | ...............}..........8...t. |
| 13120 | 04 00 3e 90 04 00 22 8d 04 00 c0 8c 04 00 12 8a 04 00 5e 8c 04 00 9a 8b 04 00 d6 8a 04 00 1a 80 | ..>..."...........^............. |
| 13140 | 04 00 7e 80 04 00 9a 75 04 00 34 77 04 00 62 76 04 00 fe 75 04 00 32 88 04 00 46 81 04 00 e2 79 | ..~....u..4w..bv...u..2...F....y |
| 13160 | 04 00 3a 83 04 00 e6 8d 04 00 4a 8e 04 00 da 8f 04 00 ae 8e 04 00 76 8f 04 00 12 8f 04 00 fa 77 | ..:.......J...........v........w |
| 13180 | 04 00 98 a9 03 00 82 cd 03 00 3e 54 02 00 74 53 02 00 d6 52 02 00 00 b7 03 00 e0 42 03 00 4c 43 | ..........>T..tS...R.......B..LC |
| 131a0 | 03 00 46 b2 03 00 24 35 03 00 ba 34 03 00 02 e5 03 00 98 41 03 00 02 42 03 00 70 42 03 00 ba cb | ..F...$5...4.......A...B..pB.... |
| 131c0 | 03 00 3a c6 03 00 2e 3a 03 00 a2 cc 03 00 3a 1e 03 00 4a 47 03 00 30 7d 02 00 9a 83 02 00 ae 74 | ..:....:......:...JG..0}.......t |
| 131e0 | 02 00 a6 79 02 00 4a 5b 03 00 9c 5c 03 00 5e 2f 03 00 a8 12 03 00 6a b7 03 00 00 ee 03 00 92 0a | ...y..J[...\..^/......j......... |
| 13200 | 03 00 0a 0b 03 00 30 39 03 00 30 48 03 00 16 58 03 00 94 58 03 00 82 63 03 00 22 66 03 00 28 8f | ......09..0H...X...X...c.."f..(. |
| 13220 | 03 00 26 ad 03 00 a6 ac 03 00 98 75 03 00 f0 68 03 00 70 26 03 00 60 7a 03 00 1e 13 03 00 e0 b7 | ..&........u...h..p&..`z........ |
| 13240 | 03 00 ac ad 03 00 be b4 03 00 52 ec 03 00 fe be 03 00 a6 c7 03 00 e0 2b 03 00 92 22 03 00 be bc | ..........R............+...".... |
| 13260 | 03 00 98 97 03 00 02 e0 03 00 00 d0 03 00 22 22 03 00 3a 7b 03 00 94 57 03 00 2c b5 03 00 50 2c | ..............""..:{...W..,...P, |
| 13280 | 03 00 cc 33 03 00 26 75 02 00 6c 77 02 00 62 73 02 00 9c 75 02 00 7c 9d 03 00 e8 ee 03 00 fe 18 | ...3..&u..lw..bs...u..|......... |
| 132a0 | 03 00 4e 6e 03 00 d6 6e 03 00 76 ee 03 00 c2 96 03 00 6e 73 03 00 28 df 03 00 ae 30 03 00 c8 92 | ..Nn...n..v.......ns..(....0.... |
| 132c0 | 03 00 1a 6c 02 00 84 6c 02 00 ee 6c 02 00 56 6d 02 00 7a 69 02 00 e4 69 02 00 de 6f 02 00 48 70 | ...l...l...l..Vm..zi...i...o..Hp |
| 132e0 | 02 00 84 65 02 00 ee 65 02 00 5c 63 02 00 c8 63 02 00 9e 68 02 00 0c 69 02 00 3c 67 02 00 ca 66 | ...e...e..\c...c...h...i..<g...f |
| 13300 | 02 00 58 66 02 00 34 64 02 00 a8 64 02 00 12 65 02 00 36 6b 02 00 a8 6b 02 00 be 6d 02 00 26 6e | ..Xf..4d...d...e..6k...k...m..&n |
| 13320 | 02 00 96 6e 02 00 00 6f 02 00 6c 6f 02 00 ae 67 02 00 26 68 02 00 4e 6a 02 00 c2 6a 02 00 b2 70 | ...n...o..lo...g..&h..Nj...j...p |
| 13340 | 02 00 20 71 02 00 fa ae 02 00 04 2b 03 00 6c 2b 03 00 de bb 03 00 dc 9a 03 00 26 ea 03 00 dc e0 | ...q.......+..l+..........&..... |
| 13360 | 03 00 c6 74 04 00 44 7a 04 00 3a 12 03 00 54 84 03 00 6a 3f 03 00 82 6c 03 00 4e 9b 03 00 36 75 | ...t..Dz..:...T...j?...l..N...6u |
| 13380 | 04 00 c6 76 04 00 34 7c 04 00 96 7c 04 00 60 91 04 00 68 26 04 00 ee b7 02 00 5e 71 04 00 e4 02 | ...v..4|...|..`...h&......^q.... |
| 133a0 | 03 00 5c ff 03 00 78 90 02 00 84 49 04 00 0a db 02 00 86 13 04 00 a2 a4 02 00 aa 72 04 00 30 04 | ..\...x....I...............r..0. |
| 133c0 | 03 00 ee 4c 04 00 74 de 02 00 80 4c 04 00 06 de 02 00 02 4f 04 00 88 e0 02 00 9c 4e 04 00 22 e0 | ...L..t....L.......O.......N..". |
| 133e0 | 02 00 10 5e 04 00 96 ef 02 00 aa 59 04 00 30 eb 02 00 78 01 04 00 94 92 02 00 e0 3f 04 00 66 d1 | ...^.......Y..0...x........?..f. |
| 13400 | 02 00 98 3a 04 00 1e cc 02 00 fe 2b 04 00 84 bd 02 00 08 17 04 00 24 a8 02 00 48 18 04 00 64 a9 | ...:.......+..........$...H...d. |
| 13420 | 02 00 aa 36 04 00 30 c8 02 00 a0 3e 04 00 26 d0 02 00 ee 46 04 00 74 d8 02 00 92 fd 03 00 ae 8e | ...6..0....>..&....F..t......... |
| 13440 | 02 00 f2 3b 04 00 78 cd 02 00 e8 70 04 00 6e 02 03 00 10 73 04 00 96 04 03 00 9e 5d 04 00 24 ef | ...;..x....p..n....s.......]..$. |
| 13460 | 02 00 26 08 04 00 42 99 02 00 44 1b 04 00 60 ac 02 00 be 1e 04 00 44 b0 02 00 16 4c 04 00 9c dd | ..&...B...D...`.......D....L.... |
| 13480 | 02 00 da 3c 04 00 60 ce 02 00 30 51 04 00 b6 e2 02 00 58 47 04 00 de d8 02 00 9c 30 04 00 22 c2 | ...<..`...0Q......XG.......0..". |
| 134a0 | 02 00 66 3c 04 00 ec cd 02 00 a8 2d 04 00 2e bf 02 00 da 5b 04 00 60 ed 02 00 e0 26 04 00 66 b8 | ..f<.......-.......[..`....&..f. |
| 134c0 | 02 00 62 f6 03 00 7e 87 02 00 c0 6e 04 00 46 00 03 00 74 4f 04 00 fa e0 02 00 32 6a 04 00 b8 fb | ..b...~....n..F...tO......2j.... |
| 134e0 | 02 00 10 5a 04 00 96 eb 02 00 ea 49 04 00 70 db 02 00 08 31 04 00 8e c2 02 00 7e 2e 04 00 04 c0 | ...Z.......I..p....1......~..... |
| 13500 | 02 00 26 41 04 00 ac d2 02 00 1e 16 04 00 3a a7 02 00 c0 2a 04 00 46 bc 02 00 2a 10 04 00 46 a1 | ..&A..........:....*..F...*...F. |
| 13520 | 02 00 8e 37 04 00 14 c9 02 00 34 45 04 00 ba d6 02 00 ee 2e 04 00 74 c0 02 00 14 46 04 00 9a d7 | ...7......4E..........t....F.... |
| 13540 | 02 00 b2 1b 04 00 ce ac 02 00 ea 73 04 00 70 05 03 00 da 01 04 00 f6 92 02 00 60 14 04 00 7c a5 | ...........s..p...........`...|. |
| 13560 | 02 00 ea 34 04 00 70 c6 02 00 10 01 04 00 2c 92 02 00 c2 4a 04 00 48 dc 02 00 f0 29 04 00 76 bb | ...4..p.......,....J..H....)..v. |
| 13580 | 02 00 f6 fa 03 00 12 8c 02 00 cc 14 04 00 e8 a5 02 00 5e 04 04 00 7a 95 02 00 1a 37 04 00 a0 c8 | ..................^...z....7.... |
| 135a0 | 02 00 40 48 04 00 c6 d9 02 00 5a 74 04 00 e0 05 03 00 4e f9 03 00 6a 8a 02 00 a4 05 04 00 c0 96 | ..@H......Zt......N...j......... |
| 135c0 | 02 00 c8 47 04 00 4e d9 02 00 5a 0c 04 00 76 9d 02 00 ae 18 04 00 ca a9 02 00 04 fe 03 00 20 8f | ...G..N...Z...v................. |
| 135e0 | 02 00 84 0b 04 00 a0 9c 02 00 a6 0d 04 00 c2 9e 02 00 80 20 04 00 06 b2 02 00 10 34 04 00 96 c5 | ...........................4.... |
| 13600 | 02 00 88 42 04 00 0e d4 02 00 ba 53 04 00 40 e5 02 00 a0 6a 04 00 26 fc 02 00 56 4a 04 00 dc db | ...B.......S..@....j..&...VJ.... |
| 13620 | 02 00 78 06 04 00 94 97 02 00 4a 39 04 00 d0 ca 02 00 7c 73 04 00 02 05 03 00 80 29 04 00 06 bb | ..x.......J9......|s.......).... |
| 13640 | 02 00 46 f7 03 00 62 88 02 00 a8 45 04 00 2e d7 02 00 74 70 04 00 fa 01 03 00 2c 5d 04 00 b2 ee | ..F...b....E......tp......,].... |
| 13660 | 02 00 3e 00 04 00 5a 91 02 00 72 6b 04 00 f8 fc 02 00 48 32 04 00 ce c3 02 00 e6 65 04 00 6c f7 | ..>...Z...rk......H2.......e..l. |
| 13680 | 02 00 a8 00 04 00 c4 91 02 00 a8 64 04 00 2e f6 02 00 8c f5 03 00 a8 86 02 00 fa f5 03 00 16 87 | ...........d.................... |
| 136a0 | 02 00 d8 f6 03 00 f4 87 02 00 c2 f7 03 00 de 88 02 00 3a f8 03 00 56 89 02 00 c0 f8 03 00 dc 89 | ..................:...V......... |
| 136c0 | 02 00 b2 f9 03 00 ce 8a 02 00 1c fa 03 00 38 8b 02 00 88 fa 03 00 a4 8b 02 00 68 fb 03 00 84 8c | ..............8...........h..... |
| 136e0 | 02 00 d6 fb 03 00 f2 8c 02 00 3e fc 03 00 5a 8d 02 00 b2 fc 03 00 ce 8d 02 00 28 fd 03 00 44 8e | ..........>...Z...........(...D. |
| 13700 | 02 00 74 fe 03 00 90 8f 02 00 e6 fe 03 00 02 90 02 00 c8 ff 03 00 e4 90 02 00 4c 02 04 00 68 93 | ..t.......................L...h. |
| 13720 | 02 00 b4 02 04 00 d0 93 02 00 1e 03 04 00 3a 94 02 00 8e 03 04 00 aa 94 02 00 f6 03 04 00 12 95 | ..............:................. |
| 13740 | 02 00 c4 04 04 00 e0 95 02 00 32 05 04 00 4e 96 02 00 0c 06 04 00 28 97 02 00 e0 06 04 00 fc 97 | ..........2...N.......(......... |
| 13760 | 02 00 50 07 04 00 6c 98 02 00 bc 07 04 00 d8 98 02 00 8c 08 04 00 a8 99 02 00 fa 08 04 00 16 9a | ..P...l......................... |
| 13780 | 02 00 6a 09 04 00 86 9a 02 00 d4 09 04 00 f0 9a 02 00 44 0a 04 00 60 9b 02 00 b2 0a 04 00 ce 9b | ..j...............D...`......... |
| 137a0 | 02 00 1a 0b 04 00 36 9c 02 00 f0 0b 04 00 0c 9d 02 00 c4 0c 04 00 e0 9d 02 00 30 0d 04 00 4c 9e | ......6...................0...L. |
| 137c0 | 02 00 10 0e 04 00 2c 9f 02 00 78 0e 04 00 94 9f 02 00 e0 0e 04 00 fc 9f 02 00 50 0f 04 00 6c a0 | ......,...x...............P...l. |
| 137e0 | 02 00 c0 0f 04 00 dc a0 02 00 96 10 04 00 b2 a1 02 00 fe 10 04 00 1a a2 02 00 6a 11 04 00 86 a2 | ..........................j..... |
| 13800 | 02 00 d8 11 04 00 f4 a2 02 00 40 12 04 00 5c a3 02 00 a6 12 04 00 c2 a3 02 00 1a 13 04 00 36 a4 | ..........@...\...............6. |
| 13820 | 02 00 f6 13 04 00 12 a5 02 00 38 15 04 00 54 a6 02 00 aa 15 04 00 c6 a6 02 00 88 16 04 00 a4 a7 | ..........8...T................. |
| 13840 | 02 00 76 17 04 00 92 a8 02 00 e0 17 04 00 fc a8 02 00 1c 19 04 00 38 aa 02 00 8e 19 04 00 aa aa | ..v...................8......... |
| 13860 | 02 00 f4 19 04 00 10 ab 02 00 64 1a 04 00 80 ab 02 00 d2 1a 04 00 ee ab 02 00 1c 1c 04 00 38 ad | ..........d...................8. |
| 13880 | 02 00 8a 1c 04 00 a6 ad 02 00 00 1d 04 00 1c ae 02 00 70 1d 04 00 8c ae 02 00 de 1d 04 00 64 af | ..................p...........d. |
| 138a0 | 02 00 48 1e 04 00 ce af 02 00 32 1f 04 00 b8 b0 02 00 a0 1f 04 00 26 b1 02 00 10 20 04 00 96 b1 | ..H.......2...........&......... |
| 138c0 | 02 00 ec 20 04 00 72 b2 02 00 60 21 04 00 e6 b2 02 00 c8 21 04 00 4e b3 02 00 30 22 04 00 b6 b3 | ......r...`!.......!..N...0".... |
| 138e0 | 02 00 94 22 04 00 1a b4 02 00 fa 22 04 00 80 b4 02 00 60 23 04 00 e6 b4 02 00 c6 23 04 00 4c b5 | ..."......."......`#.......#..L. |
| 13900 | 02 00 3c 24 04 00 c2 b5 02 00 a8 24 04 00 2e b6 02 00 16 25 04 00 9c b6 02 00 86 25 04 00 0c b7 | ..<$.......$.......%.......%.... |
| 13920 | 02 00 f6 25 04 00 7c b7 02 00 4e 27 04 00 d4 b8 02 00 ba 27 04 00 40 b9 02 00 28 28 04 00 ae b9 | ...%..|...N'.......'..@...((.... |
| 13940 | 02 00 9e 28 04 00 24 ba 02 00 0a 29 04 00 90 ba 02 00 56 2a 04 00 dc bb 02 00 26 2b 04 00 ac bc | ...(..$....)......V*......&+.... |
| 13960 | 02 00 94 2b 04 00 1a bd 02 00 62 2c 04 00 e8 bd 02 00 ce 2c 04 00 54 be 02 00 36 2d 04 00 bc be | ...+......b,.......,..T...6-.... |
| 13980 | 02 00 10 2e 04 00 96 bf 02 00 56 2f 04 00 dc c0 02 00 c0 2f 04 00 46 c1 02 00 34 30 04 00 ba c1 | ..........V/......./..F...40.... |
| 139a0 | 02 00 76 31 04 00 fc c2 02 00 dc 31 04 00 62 c3 02 00 b6 32 04 00 3c c4 02 00 22 33 04 00 a8 c4 | ..v1.......1..b....2..<..."3.... |
| 139c0 | 02 00 98 33 04 00 1e c5 02 00 82 34 04 00 08 c6 02 00 5a 35 04 00 e0 c6 02 00 ca 35 04 00 50 c7 | ...3.......4......Z5.......5..P. |
| 139e0 | 02 00 38 36 04 00 be c7 02 00 fe 37 04 00 84 c9 02 00 70 38 04 00 f6 c9 02 00 e2 38 04 00 68 ca | ..86.......7......p8.......8..h. |
| 13a00 | 02 00 b2 39 04 00 38 cb 02 00 26 3a 04 00 ac cb 02 00 0a 3b 04 00 90 cc 02 00 80 3b 04 00 06 cd | ...9..8...&:.......;.......;.... |
| 13a20 | 02 00 4c 3d 04 00 d2 ce 02 00 c0 3d 04 00 46 cf 02 00 32 3e 04 00 b8 cf 02 00 06 3f 04 00 8c d0 | ..L=.......=..F...2>.......?.... |
| 13a40 | 02 00 78 3f 04 00 fe d0 02 00 48 40 04 00 ce d1 02 00 b6 40 04 00 3c d2 02 00 9a 41 04 00 20 d3 | ..x?......H@.......@..<....A.... |
| 13a60 | 02 00 12 42 04 00 98 d3 02 00 f2 42 04 00 78 d4 02 00 62 43 04 00 e8 d4 02 00 ce 43 04 00 54 d5 | ...B.......B..x...bC.......C..T. |
| 13a80 | 02 00 42 44 04 00 c8 d5 02 00 ba 44 04 00 40 d6 02 00 7c 46 04 00 02 d8 02 00 ac 48 04 00 32 da | ..BD.......D..@...|F.......H..2. |
| 13aa0 | 02 00 18 49 04 00 9e da 02 00 30 4b 04 00 b6 dc 02 00 a8 4b 04 00 2e dd 02 00 5e 4d 04 00 e4 de | ...I......0K.......K......^M.... |
| 13ac0 | 02 00 ce 4d 04 00 54 df 02 00 34 4e 04 00 ba df 02 00 e8 4f 04 00 6e e1 02 00 58 50 04 00 de e1 | ...M..T...4N.......O..n...XP.... |
| 13ae0 | 02 00 c8 50 04 00 4e e2 02 00 a2 51 04 00 28 e3 02 00 14 52 04 00 9a e3 02 00 7c 52 04 00 02 e4 | ...P..N....Q..(....R......|R.... |
| 13b00 | 02 00 e8 52 04 00 6e e4 02 00 50 53 04 00 d6 e4 02 00 24 54 04 00 aa e5 02 00 88 54 04 00 0e e6 | ...R..n...PS......$T.......T.... |
| 13b20 | 02 00 ee 54 04 00 74 e6 02 00 5a 55 04 00 e0 e6 02 00 c8 55 04 00 4e e7 02 00 36 56 04 00 bc e7 | ...T..t...ZU.......U..N...6V.... |
| 13b40 | 02 00 a2 56 04 00 28 e8 02 00 10 57 04 00 96 e8 02 00 80 57 04 00 06 e9 02 00 f4 57 04 00 7a e9 | ...V..(....W.......W.......W..z. |
| 13b60 | 02 00 62 58 04 00 e8 e9 02 00 d4 58 04 00 5a ea 02 00 44 59 04 00 ca ea 02 00 82 5a 04 00 08 ec | ..bX.......X..Z...DY.......Z.... |
| 13b80 | 02 00 f0 5a 04 00 76 ec 02 00 64 5b 04 00 ea ec 02 00 4a 5c 04 00 d0 ed 02 00 be 5c 04 00 44 ee | ...Z..v...d[......J\.......\..D. |
| 13ba0 | 02 00 82 5e 04 00 08 f0 02 00 f2 5e 04 00 78 f0 02 00 62 5f 04 00 e8 f0 02 00 ce 5f 04 00 54 f1 | ...^.......^..x...b_......._..T. |
| 13bc0 | 02 00 38 60 04 00 be f1 02 00 a4 60 04 00 2a f2 02 00 18 61 04 00 9e f2 02 00 8c 61 04 00 12 f3 | ..8`.......`..*....a.......a.... |
| 13be0 | 02 00 fa 61 04 00 80 f3 02 00 70 62 04 00 f6 f3 02 00 e8 62 04 00 6e f4 02 00 5a 63 04 00 e0 f4 | ...a......pb.......b..n...Zc.... |
| 13c00 | 02 00 ca 63 04 00 50 f5 02 00 34 64 04 00 ba f5 02 00 0e 65 04 00 94 f6 02 00 7e 65 04 00 04 f7 | ...c..P...4d.......e......~e.... |
| 13c20 | 02 00 4e 66 04 00 d4 f7 02 00 c4 66 04 00 4a f8 02 00 30 67 04 00 b6 f8 02 00 aa 67 04 00 30 f9 | ..Nf.......f..J...0g.......g..0. |
| 13c40 | 02 00 14 68 04 00 9a f9 02 00 7c 68 04 00 02 fa 02 00 e8 68 04 00 6e fa 02 00 52 69 04 00 d8 fa | ...h......|h.......h..n...Ri.... |
| 13c60 | 02 00 c2 69 04 00 48 fb 02 00 0c 6b 04 00 92 fc 02 00 da 6b 04 00 60 fd 02 00 48 6c 04 00 ce fd | ...i..H....k.......k..`...Hl.... |
| 13c80 | 02 00 b2 6c 04 00 38 fe 02 00 18 6d 04 00 9e fe 02 00 80 6d 04 00 06 ff 02 00 e8 6d 04 00 6e ff | ...l..8....m.......m.......m..n. |
| 13ca0 | 02 00 50 6e 04 00 d6 ff 02 00 30 6f 04 00 b6 00 03 00 98 6f 04 00 1e 01 03 00 06 70 04 00 8c 01 | ..Pn......0o.......o.......p.... |
| 13cc0 | 03 00 ce 71 04 00 54 03 03 00 3c 72 04 00 c2 03 03 00 bd 0a 00 00 91 02 90 02 8f 02 e0 01 e2 01 | ...q..T...<r.................... |
| 13ce0 | e3 01 e5 01 e4 01 e6 01 df 01 de 01 e1 01 ec 01 ea 01 e9 01 e8 01 e7 01 eb 01 0e 00 0f 00 10 00 | ................................ |
| 13d00 | 13 00 14 00 17 00 16 00 04 00 06 00 0d 00 08 00 09 00 0c 00 0b 00 0a 00 07 00 05 00 15 00 e7 02 | ................................ |
| 13d20 | e8 02 ee 02 ef 02 f0 02 e5 02 e6 02 ed 02 ec 02 eb 02 f8 02 f9 02 e9 02 ea 02 e1 02 e2 02 fa 02 | ................................ |
| 13d40 | fb 02 f1 02 f2 02 dd 02 de 02 df 02 e0 02 f3 02 f4 02 f5 02 f6 02 f7 02 e3 02 e4 02 fc 02 fd 02 | ................................ |
| 13d60 | 1b 00 18 00 19 00 1a 00 d0 02 1c 00 26 00 a4 02 ce 02 d1 02 33 00 1e 00 1d 00 cf 02 1f 00 22 00 | ............&.......3.........". |
| 13d80 | 21 00 20 00 a5 02 23 00 24 00 27 00 28 00 25 00 34 00 29 00 a2 02 2a 00 2d 00 12 02 2b 00 1c 02 | !.....#.$.'.(.%.4.)...*.-...+... |
| 13da0 | 14 02 15 02 13 02 11 02 2e 00 2c 00 2f 00 30 00 a3 02 31 00 32 00 1d 02 37 00 35 00 36 00 d2 03 | ..........,./.0...1.2...7.5.6... |
| 13dc0 | d4 03 5e 03 d6 03 be 03 d8 03 da 03 dc 03 9a 03 de 03 e0 03 e2 03 8e 03 e4 03 e6 03 e8 03 ea 03 | ..^............................. |
| 13de0 | ec 03 3c 03 a4 03 ee 03 f0 03 16 03 f2 03 c6 03 ce 03 88 03 2a 03 82 03 f4 03 f6 03 f8 03 fa 03 | ..<.................*........... |
| 13e00 | fc 03 92 03 fe 03 00 04 9c 03 02 04 b6 03 04 04 06 04 08 04 46 03 0a 04 0c 04 0e 04 10 04 12 04 | ....................F........... |
| 13e20 | 14 04 16 04 a6 03 18 04 a0 03 1a 04 1c 04 a8 03 1e 04 20 04 22 04 24 04 26 04 74 03 28 04 2a 04 | ....................".$.&.t.(.*. |
| 13e40 | 2c 04 2e 04 30 04 32 04 34 04 1a 03 36 04 84 03 90 03 38 04 3a 04 70 03 3c 04 32 03 3e 04 40 04 | ,...0.2.4...6.....8.:.p.<.2.>.@. |
| 13e60 | 34 03 a2 03 42 04 44 04 46 04 48 04 4a 04 48 03 7e 03 4c 04 4e 04 50 04 52 04 fe 02 54 04 56 04 | 4...B.D.F.H.J.H.~.L.N.P.R...T.V. |
| 13e80 | 4a 03 58 04 5a 04 5c 04 aa 03 5e 04 60 04 62 04 64 04 66 04 68 04 6a 04 6c 04 6e 04 70 04 72 04 | J.X.Z.\...^.`.b.d.f.h.j.l.n.p.r. |
| 13ea0 | 74 04 76 04 12 03 5c 03 78 04 7a 04 7c 04 7e 04 80 04 bc 03 8c 03 82 04 72 03 84 04 86 04 30 03 | t.v...\.x.z.|.~.........r.....0. |
| 13ec0 | 88 04 8a 04 8c 04 58 03 8e 04 6c 03 7a 03 90 04 92 04 94 04 54 03 6a 03 96 04 98 04 ca 03 9a 04 | ......X...l.z.......T.j......... |
| 13ee0 | 9c 04 9e 04 ac 03 a0 04 86 03 a2 04 a4 04 a6 04 36 03 94 03 76 03 a8 04 aa 04 ac 04 b8 03 ae 04 | ................6...v........... |
| 13f00 | b0 04 2e 03 b2 04 b4 04 3e 03 56 03 4e 03 b6 04 b8 04 ba 04 38 03 bc 04 be 04 2c 03 c0 04 c2 04 | ........>.V.N.......8.....,..... |
| 13f20 | 6e 03 c4 04 c6 04 ae 03 c8 04 ca 04 cc 04 ce 04 d0 04 78 03 c0 03 7c 03 d2 04 3a 03 52 03 9e 03 | n.................x...|...:.R... |
| 13f40 | 96 03 d4 04 d6 04 18 03 68 03 b4 03 8a 03 d8 04 da 04 4c 03 20 03 1e 03 dc 04 de 04 e0 04 24 03 | ........h.........L...........$. |
| 13f60 | 22 03 62 03 e2 04 e4 04 e6 04 50 03 e8 04 ea 04 ec 04 ee 04 f0 04 b0 03 f2 04 f4 04 f6 04 f8 04 | ".b.......P..................... |
| 13f80 | fa 04 fc 04 fe 04 00 05 02 05 04 05 06 05 08 05 0a 05 28 03 66 03 0c 05 0e 05 10 05 5a 03 12 05 | ..................(.f.......Z... |
| 13fa0 | 14 05 c4 03 44 03 26 03 16 05 18 05 1a 05 1c 05 1e 05 20 05 22 05 24 05 26 05 28 05 2a 05 2c 05 | ....D.&.............".$.&.(.*.,. |
| 13fc0 | 2e 05 30 05 d0 03 32 05 34 05 cc 03 36 05 38 05 3a 05 3c 05 3e 05 40 05 42 05 44 05 46 05 64 03 | ..0...2.4...6.8.:.<.>.@.B.D.F.d. |
| 13fe0 | b2 03 48 05 c8 03 4a 05 4c 05 4e 05 50 05 52 05 54 05 56 05 60 03 58 05 5a 05 5c 05 c2 03 40 03 | ..H...J.L.N.P.R.T.V.`.X.Z.\...@. |
| 14000 | 14 03 5e 05 60 05 1c 03 42 03 ba 03 80 03 98 03 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 | ..^.`...B.......8.9.:.;.<.=.>.?. |
| 14020 | 40 00 41 00 ac 02 ad 02 42 00 43 00 44 00 45 00 46 00 47 00 48 00 4a 00 4b 00 4c 00 4d 00 4e 00 | @.A.....B.C.D.E.F.G.H.J.K.L.M.N. |
| 14040 | 4f 00 50 00 49 00 07 03 a9 02 bb 02 1f 02 21 02 51 00 52 00 53 00 54 00 55 00 56 00 57 00 58 00 | O.P.I.........!.Q.R.S.T.U.V.W.X. |
| 14060 | 59 00 5a 00 d4 02 5b 00 5d 00 5c 00 5e 00 5f 00 60 00 61 00 62 00 63 00 64 00 65 00 a0 02 0a 02 | Y.Z...[.].\.^._.`.a.b.c.d.e..... |
| 14080 | 0b 02 66 00 67 00 68 00 69 00 6a 00 6b 00 c8 02 c3 02 6c 00 6d 00 6e 00 6f 00 70 00 71 00 72 00 | ..f.g.h.i.j.k.....l.m.n.o.p.q.r. |
| 140a0 | 73 00 b9 02 4c 01 74 00 75 00 76 00 78 00 77 00 79 00 7a 00 7b 00 ff 02 00 03 c2 02 cc 02 7c 00 | s...L.t.u.v.x.w.y.z.{.........|. |
| 140c0 | 7d 00 7e 00 7f 00 80 00 81 00 a8 02 82 00 83 00 db 02 84 00 85 00 86 00 f3 01 87 00 88 00 cd 02 | }.~............................. |
| 140e0 | f0 01 97 02 96 02 89 00 8a 00 8b 00 8c 00 8d 00 18 02 ed 01 9d 00 ae 02 8f 00 9e 02 b3 00 b5 00 | ................................ |
| 14100 | 90 00 91 00 92 00 93 00 95 00 96 00 97 00 98 00 99 00 09 03 94 00 9a 00 9b 00 9c 00 99 02 9a 02 | ................................ |
| 14120 | 9b 02 93 02 94 02 9e 00 9f 00 a0 00 a1 00 a2 00 f4 01 a3 00 a4 00 a1 02 a5 00 af 02 a8 00 a6 00 | ................................ |
| 14140 | a9 00 a7 00 ab 00 ac 00 ad 00 ae 00 af 00 b0 00 b1 00 b6 00 b2 00 b4 00 b7 00 c0 00 bb 00 bc 00 | ................................ |
| 14160 | bd 00 be 00 bf 00 c1 00 c2 00 c3 00 c4 00 c5 00 c6 00 c7 00 c8 00 8e 00 c9 00 ee 01 ca 00 ca 02 | ................................ |
| 14180 | b0 02 b1 02 cb 00 cc 00 cd 00 ce 00 d0 00 a6 02 cf 00 d2 00 a7 02 d1 00 d3 00 d4 00 25 01 d5 00 | ............................%... |
| 141a0 | f6 01 d8 00 d6 00 d7 00 d9 00 da 00 db 00 dc 00 dd 00 de 00 b2 02 df 00 e0 00 f1 00 e1 00 e2 00 | ................................ |
| 141c0 | b3 02 08 02 e3 00 e4 00 ba 00 e8 00 b8 02 e9 00 eb 00 ec 00 ed 00 ee 00 f2 00 f3 00 0a 03 f4 00 | ................................ |
| 141e0 | f5 00 f6 00 d5 02 d6 02 f7 00 ef 00 fa 00 fb 00 f0 00 fc 00 f2 01 fd 00 fe 00 d9 02 ff 00 f9 00 | ................................ |
| 14200 | f8 00 00 01 b7 02 01 01 02 01 03 01 04 01 05 01 06 01 07 01 08 01 09 01 1b 02 ba 02 16 02 c9 02 | ................................ |
| 14220 | 17 01 18 01 19 01 0a 01 0b 01 0c 01 0d 01 0e 01 10 01 11 01 12 01 14 01 13 01 16 01 15 01 1a 01 | ................................ |
| 14240 | 1b 01 1c 01 1d 01 08 03 26 01 1e 01 1f 01 20 01 21 01 22 01 24 01 27 01 29 01 2a 01 28 01 2b 01 | ........&.......!.".$.'.).*.(.+. |
| 14260 | 2d 01 2e 01 2c 01 2f 01 31 01 32 01 30 01 33 01 35 01 36 01 34 01 b4 02 b8 00 b9 00 37 01 38 01 | -...,./.1.2.0.3.5.6.4.......7.8. |
| 14280 | 39 01 3a 01 07 02 dc 02 3b 01 3c 01 3d 01 3e 01 3f 01 40 01 41 01 dd 01 d8 02 42 01 c5 02 09 02 | 9.:.....;.<.=.>.?.@.A.....B..... |
| 142a0 | 43 01 44 01 45 01 46 01 47 01 02 03 0b 03 48 01 49 01 4a 01 4b 01 d2 02 4d 01 4e 01 4f 01 50 01 | C.D.E.F.G.....H.I.J.K...M.N.O.P. |
| 142c0 | 51 01 52 01 53 01 54 01 55 01 56 01 aa 00 57 01 58 01 59 01 5a 01 5b 01 5c 01 5d 01 5e 01 5f 01 | Q.R.S.T.U.V...W.X.Y.Z.[.\.].^._. |
| 142e0 | 60 01 61 01 68 01 69 01 6a 01 6b 01 8d 02 6c 01 6e 01 23 01 6f 01 70 01 71 01 b6 02 b5 02 bd 02 | `.a.h.i.j.k...l.n.#.o.p.q....... |
| 14300 | 0f 02 f5 01 10 02 0e 02 72 01 73 01 f1 01 74 01 6d 01 95 02 75 01 76 01 77 01 78 01 79 01 be 02 | ........r.s...t.m...u.v.w.x.y... |
| 14320 | cb 02 7a 01 7b 01 f7 01 92 02 aa 02 bc 02 7c 01 7d 01 7e 01 7f 01 80 01 20 02 22 02 17 02 01 03 | ..z.{.........|.}.~......."..... |
| 14340 | 81 01 c4 02 82 01 83 01 84 01 85 01 c0 02 86 01 87 01 88 01 e6 00 89 01 e5 00 0f 01 8a 01 8b 01 | ................................ |
| 14360 | 8c 01 e7 00 8d 01 8e 01 8f 01 94 01 9d 02 90 01 91 01 c1 02 95 01 96 01 97 01 98 01 99 01 9a 01 | ................................ |
| 14380 | 9b 01 9c 01 9c 02 9d 01 9f 02 ea 00 8e 02 93 01 92 01 9e 01 9f 01 a0 01 c7 02 a1 01 a2 01 a3 01 | ................................ |
| 143a0 | a4 01 a5 01 dc 01 a7 01 a6 01 a8 01 a9 01 aa 01 ae 01 ab 01 ac 01 b0 01 af 01 b1 01 b2 01 ad 01 | ................................ |
| 143c0 | b3 01 b4 01 b5 01 b6 01 b7 01 bb 01 b8 01 b9 01 ba 01 19 02 bc 01 be 01 bd 01 bf 01 da 02 c0 01 | ................................ |
| 143e0 | c6 02 c1 01 04 03 c2 01 c3 01 c4 01 c6 01 c5 01 1a 02 c7 01 c8 01 98 02 c9 01 ca 01 ef 01 cb 01 | ................................ |
| 14400 | ce 01 cd 01 cf 01 0c 02 0d 02 cc 01 d0 01 03 03 d1 01 d2 01 d3 01 d4 01 bf 02 d5 01 da 01 db 01 | ................................ |
| 14420 | ab 02 d7 02 d3 02 04 02 62 01 63 01 64 01 65 01 66 01 67 01 06 02 05 02 d6 01 d7 01 d8 01 d9 01 | ........b.c.d.e.f.g............. |
| 14440 | 1e 02 d1 03 d3 03 5d 03 d5 03 bd 03 d7 03 d9 03 db 03 99 03 dd 03 df 03 e1 03 8d 03 e3 03 e5 03 | ......]......................... |
| 14460 | e7 03 e9 03 eb 03 3b 03 a3 03 ed 03 ef 03 15 03 f1 03 c5 03 cd 03 87 03 29 03 81 03 f3 03 f5 03 | ......;.................)....... |
| 14480 | f7 03 f9 03 fb 03 91 03 fd 03 ff 03 9b 03 01 04 b5 03 03 04 05 04 07 04 45 03 09 04 0b 04 0d 04 | ........................E....... |
| 144a0 | 0f 04 11 04 13 04 15 04 a5 03 17 04 9f 03 19 04 1b 04 a7 03 1d 04 1f 04 21 04 23 04 25 04 73 03 | ........................!.#.%.s. |
| 144c0 | 27 04 29 04 2b 04 2d 04 2f 04 31 04 33 04 19 03 35 04 83 03 8f 03 37 04 39 04 6f 03 3b 04 31 03 | '.).+.-./.1.3...5.....7.9.o.;.1. |
| 144e0 | 3d 04 3f 04 33 03 a1 03 41 04 43 04 45 04 47 04 49 04 47 03 7d 03 4b 04 4d 04 4f 04 51 04 53 04 | =.?.3...A.C.E.G.I.G.}.K.M.O.Q.S. |
| 14500 | 55 04 49 03 57 04 59 04 5b 04 a9 03 5d 04 5f 04 61 04 63 04 65 04 67 04 69 04 6b 04 6d 04 6f 04 | U.I.W.Y.[...]._.a.c.e.g.i.k.m.o. |
| 14520 | 71 04 73 04 75 04 11 03 5b 03 77 04 79 04 7b 04 7d 04 7f 04 bb 03 8b 03 81 04 71 03 83 04 85 04 | q.s.u...[.w.y.{.}.........q..... |
| 14540 | 2f 03 87 04 89 04 8b 04 57 03 8d 04 6b 03 79 03 8f 04 91 04 93 04 53 03 69 03 95 04 97 04 c9 03 | /.......W...k.y.......S.i....... |
| 14560 | 99 04 9b 04 9d 04 ab 03 9f 04 85 03 a1 04 a3 04 a5 04 35 03 93 03 75 03 a7 04 a9 04 ab 04 b7 03 | ..................5...u......... |
| 14580 | ad 04 af 04 2d 03 b1 04 b3 04 3d 03 55 03 4d 03 b5 04 b7 04 b9 04 37 03 bb 04 bd 04 2b 03 bf 04 | ....-.....=.U.M.......7.....+... |
| 145a0 | c1 04 6d 03 c3 04 c5 04 ad 03 c7 04 c9 04 cb 04 cd 04 cf 04 77 03 bf 03 7b 03 d1 04 39 03 51 03 | ..m.................w...{...9.Q. |
| 145c0 | 9d 03 95 03 d3 04 d5 04 17 03 67 03 b3 03 89 03 d7 04 d9 04 4b 03 1f 03 1d 03 db 04 dd 04 df 04 | ..........g.........K........... |
| 145e0 | 23 03 21 03 61 03 e1 04 e3 04 e5 04 4f 03 e7 04 e9 04 eb 04 ed 04 ef 04 af 03 f1 04 f3 04 f5 04 | #.!.a.......O................... |
| 14600 | f7 04 f9 04 fb 04 fd 04 ff 04 01 05 03 05 05 05 07 05 09 05 27 03 65 03 0b 05 0d 05 0f 05 59 03 | ....................'.e.......Y. |
| 14620 | 11 05 13 05 c3 03 43 03 25 03 15 05 17 05 19 05 1b 05 1d 05 1f 05 21 05 23 05 25 05 27 05 29 05 | ......C.%.............!.#.%.'.). |
| 14640 | 2b 05 2d 05 2f 05 cf 03 31 05 33 05 cb 03 35 05 37 05 39 05 3b 05 3d 05 3f 05 41 05 43 05 45 05 | +.-./...1.3...5.7.9.;.=.?.A.C.E. |
| 14660 | 63 03 b1 03 47 05 c7 03 49 05 4b 05 4d 05 4f 05 51 05 53 05 55 05 5f 03 57 05 59 05 5b 05 c1 03 | c...G...I.K.M.O.Q.S.U._.W.Y.[... |
| 14680 | 3f 03 13 03 5d 05 5f 05 1b 03 41 03 b9 03 7f 03 97 03 05 03 01 00 02 00 0c 03 91 02 90 02 8f 02 | ?...]._...A..................... |
| 146a0 | e0 01 e2 01 e3 01 e5 01 e4 01 e6 01 df 01 de 01 e1 01 ec 01 ea 01 e9 01 e8 01 e7 01 eb 01 0e 00 | ................................ |
| 146c0 | 0f 00 10 00 13 00 14 00 17 00 16 00 04 00 06 00 0d 00 08 00 09 00 0c 00 0b 00 0a 00 07 00 05 00 | ................................ |
| 146e0 | 15 00 e7 02 e8 02 ee 02 ef 02 f0 02 e5 02 e6 02 ed 02 ec 02 eb 02 f8 02 f9 02 e9 02 ea 02 e1 02 | ................................ |
| 14700 | e2 02 fa 02 fb 02 f1 02 f2 02 dd 02 de 02 df 02 e0 02 f3 02 f4 02 f5 02 f6 02 f7 02 e3 02 e4 02 | ................................ |
| 14720 | fc 02 fd 02 1b 00 18 00 19 00 1a 00 d0 02 1c 00 26 00 a4 02 ce 02 d1 02 33 00 1e 00 1d 00 cf 02 | ................&.......3....... |
| 14740 | 1f 00 22 00 21 00 20 00 a5 02 23 00 24 00 27 00 28 00 25 00 34 00 29 00 a2 02 2a 00 2d 00 12 02 | ..".!.....#.$.'.(.%.4.)...*.-... |
| 14760 | 2b 00 1c 02 14 02 15 02 13 02 11 02 2e 00 2c 00 2f 00 30 00 a3 02 31 00 32 00 1d 02 37 00 35 00 | +.............,./.0...1.2...7.5. |
| 14780 | 36 00 d2 03 d4 03 5e 03 d6 03 be 03 d8 03 da 03 dc 03 9a 03 de 03 e0 03 e2 03 8e 03 e4 03 e6 03 | 6.....^......................... |
| 147a0 | e8 03 ea 03 ec 03 3c 03 a4 03 ee 03 f0 03 16 03 f2 03 c6 03 ce 03 88 03 2a 03 82 03 f4 03 f6 03 | ......<.................*....... |
| 147c0 | f8 03 fa 03 fc 03 92 03 fe 03 00 04 9c 03 02 04 b6 03 04 04 06 04 08 04 46 03 0a 04 0c 04 0e 04 | ........................F....... |
| 147e0 | 10 04 12 04 14 04 16 04 a6 03 18 04 a0 03 1a 04 1c 04 a8 03 1e 04 20 04 22 04 24 04 26 04 74 03 | ........................".$.&.t. |
| 14800 | 28 04 2a 04 2c 04 2e 04 30 04 32 04 34 04 1a 03 36 04 84 03 90 03 38 04 3a 04 70 03 3c 04 32 03 | (.*.,...0.2.4...6.....8.:.p.<.2. |
| 14820 | 3e 04 40 04 34 03 a2 03 42 04 44 04 46 04 48 04 4a 04 48 03 7e 03 4c 04 4e 04 50 04 52 04 fe 02 | >.@.4...B.D.F.H.J.H.~.L.N.P.R... |
| 14840 | 54 04 56 04 4a 03 58 04 5a 04 5c 04 aa 03 5e 04 60 04 62 04 64 04 66 04 68 04 6a 04 6c 04 6e 04 | T.V.J.X.Z.\...^.`.b.d.f.h.j.l.n. |
| 14860 | 70 04 72 04 74 04 76 04 12 03 5c 03 78 04 7a 04 7c 04 7e 04 80 04 bc 03 8c 03 82 04 72 03 84 04 | p.r.t.v...\.x.z.|.~.........r... |
| 14880 | 86 04 30 03 88 04 8a 04 8c 04 58 03 8e 04 6c 03 7a 03 90 04 92 04 94 04 54 03 6a 03 96 04 98 04 | ..0.......X...l.z.......T.j..... |
| 148a0 | ca 03 9a 04 9c 04 9e 04 ac 03 a0 04 86 03 a2 04 a4 04 a6 04 36 03 94 03 76 03 a8 04 aa 04 ac 04 | ....................6...v....... |
| 148c0 | b8 03 ae 04 b0 04 2e 03 b2 04 b4 04 3e 03 56 03 4e 03 b6 04 b8 04 ba 04 38 03 bc 04 be 04 2c 03 | ............>.V.N.......8.....,. |
| 148e0 | c0 04 c2 04 6e 03 c4 04 c6 04 ae 03 c8 04 ca 04 cc 04 ce 04 d0 04 78 03 c0 03 7c 03 d2 04 3a 03 | ....n.................x...|...:. |
| 14900 | 52 03 9e 03 96 03 d4 04 d6 04 18 03 68 03 b4 03 8a 03 d8 04 da 04 4c 03 20 03 1e 03 dc 04 de 04 | R...........h.........L......... |
| 14920 | e0 04 24 03 22 03 62 03 e2 04 e4 04 e6 04 50 03 e8 04 ea 04 ec 04 ee 04 f0 04 b0 03 f2 04 f4 04 | ..$.".b.......P................. |
| 14940 | f6 04 f8 04 fa 04 fc 04 fe 04 00 05 02 05 04 05 06 05 08 05 0a 05 28 03 66 03 0c 05 0e 05 10 05 | ......................(.f....... |
| 14960 | 5a 03 12 05 14 05 c4 03 44 03 26 03 16 05 18 05 1a 05 1c 05 1e 05 20 05 22 05 24 05 26 05 28 05 | Z.......D.&.............".$.&.(. |
| 14980 | 2a 05 2c 05 2e 05 30 05 d0 03 32 05 34 05 cc 03 36 05 38 05 3a 05 3c 05 3e 05 40 05 42 05 44 05 | *.,...0...2.4...6.8.:.<.>.@.B.D. |
| 149a0 | 46 05 64 03 b2 03 48 05 c8 03 4a 05 4c 05 4e 05 50 05 52 05 54 05 56 05 60 03 58 05 5a 05 5c 05 | F.d...H...J.L.N.P.R.T.V.`.X.Z.\. |
| 149c0 | c2 03 40 03 14 03 5e 05 60 05 1c 03 42 03 ba 03 80 03 98 03 38 00 39 00 3a 00 3b 00 3c 00 3d 00 | ..@...^.`...B.......8.9.:.;.<.=. |
| 149e0 | 3e 00 3f 00 40 00 41 00 ac 02 ad 02 42 00 43 00 44 00 45 00 46 00 47 00 48 00 4a 00 4b 00 4c 00 | >.?.@.A.....B.C.D.E.F.G.H.J.K.L. |
| 14a00 | 4d 00 4e 00 4f 00 50 00 49 00 07 03 a9 02 bb 02 1f 02 21 02 51 00 52 00 53 00 54 00 55 00 56 00 | M.N.O.P.I.........!.Q.R.S.T.U.V. |
| 14a20 | 57 00 58 00 59 00 5a 00 d4 02 5b 00 5d 00 5c 00 5e 00 5f 00 60 00 61 00 62 00 63 00 64 00 65 00 | W.X.Y.Z...[.].\.^._.`.a.b.c.d.e. |
| 14a40 | a0 02 0a 02 0b 02 66 00 67 00 68 00 69 00 6a 00 6b 00 c8 02 c3 02 6c 00 6d 00 6e 00 6f 00 70 00 | ......f.g.h.i.j.k.....l.m.n.o.p. |
| 14a60 | 71 00 72 00 73 00 b9 02 4c 01 74 00 75 00 76 00 78 00 77 00 79 00 7a 00 7b 00 ff 02 00 03 c2 02 | q.r.s...L.t.u.v.x.w.y.z.{....... |
| 14a80 | cc 02 7c 00 7d 00 7e 00 7f 00 80 00 81 00 a8 02 82 00 83 00 db 02 84 00 85 00 86 00 f3 01 87 00 | ..|.}.~......................... |
| 14aa0 | 88 00 cd 02 f0 01 97 02 96 02 89 00 8a 00 8b 00 8c 00 8d 00 18 02 ed 01 9d 00 ae 02 8f 00 9e 02 | ................................ |
| 14ac0 | b3 00 b5 00 90 00 91 00 92 00 93 00 95 00 96 00 97 00 98 00 99 00 09 03 94 00 9a 00 9b 00 9c 00 | ................................ |
| 14ae0 | 99 02 9a 02 9b 02 93 02 94 02 9e 00 9f 00 a0 00 a1 00 a2 00 f4 01 a3 00 a4 00 a1 02 a5 00 af 02 | ................................ |
| 14b00 | a8 00 a6 00 a9 00 a7 00 ab 00 ac 00 ad 00 ae 00 af 00 b0 00 b1 00 b6 00 b2 00 b4 00 b7 00 c0 00 | ................................ |
| 14b20 | bb 00 bc 00 bd 00 be 00 bf 00 c1 00 c2 00 c3 00 c4 00 c5 00 c6 00 c7 00 c8 00 8e 00 c9 00 ee 01 | ................................ |
| 14b40 | ca 00 ca 02 b0 02 b1 02 cb 00 cc 00 cd 00 ce 00 d0 00 a6 02 cf 00 d2 00 a7 02 d1 00 d3 00 d4 00 | ................................ |
| 14b60 | 25 01 d5 00 f6 01 d8 00 d6 00 d7 00 d9 00 da 00 db 00 dc 00 dd 00 de 00 b2 02 df 00 e0 00 f1 00 | %............................... |
| 14b80 | e1 00 e2 00 b3 02 08 02 e3 00 e4 00 ba 00 e8 00 b8 02 e9 00 eb 00 ec 00 ed 00 ee 00 f2 00 f3 00 | ................................ |
| 14ba0 | 0a 03 f4 00 f5 00 f6 00 d5 02 d6 02 f7 00 ef 00 fa 00 fb 00 f0 00 fc 00 f2 01 fd 00 fe 00 d9 02 | ................................ |
| 14bc0 | ff 00 f9 00 f8 00 00 01 b7 02 01 01 02 01 03 01 04 01 05 01 06 01 07 01 08 01 09 01 1b 02 ba 02 | ................................ |
| 14be0 | 16 02 c9 02 17 01 18 01 19 01 0a 01 0b 01 0c 01 0d 01 0e 01 10 01 11 01 12 01 14 01 13 01 16 01 | ................................ |
| 14c00 | 15 01 1a 01 1b 01 1c 01 1d 01 08 03 26 01 1e 01 1f 01 20 01 21 01 22 01 24 01 27 01 29 01 2a 01 | ............&.......!.".$.'.).*. |
| 14c20 | 28 01 2b 01 2d 01 2e 01 2c 01 2f 01 31 01 32 01 30 01 33 01 35 01 36 01 34 01 b4 02 b8 00 b9 00 | (.+.-...,./.1.2.0.3.5.6.4....... |
| 14c40 | 37 01 38 01 39 01 3a 01 07 02 dc 02 3b 01 3c 01 3d 01 3e 01 3f 01 40 01 41 01 dd 01 d8 02 42 01 | 7.8.9.:.....;.<.=.>.?.@.A.....B. |
| 14c60 | c5 02 09 02 43 01 44 01 45 01 46 01 47 01 02 03 0b 03 48 01 49 01 4a 01 4b 01 d2 02 4d 01 4e 01 | ....C.D.E.F.G.....H.I.J.K...M.N. |
| 14c80 | 4f 01 50 01 51 01 52 01 53 01 54 01 55 01 56 01 aa 00 57 01 58 01 59 01 5a 01 5b 01 5c 01 5d 01 | O.P.Q.R.S.T.U.V...W.X.Y.Z.[.\.]. |
| 14ca0 | 5e 01 5f 01 60 01 61 01 68 01 69 01 6a 01 6b 01 8d 02 6c 01 6e 01 23 01 6f 01 70 01 71 01 b6 02 | ^._.`.a.h.i.j.k...l.n.#.o.p.q... |
| 14cc0 | b5 02 bd 02 0f 02 f5 01 10 02 0e 02 72 01 73 01 f1 01 74 01 6d 01 95 02 75 01 76 01 77 01 78 01 | ............r.s...t.m...u.v.w.x. |
| 14ce0 | 79 01 be 02 cb 02 7a 01 7b 01 f7 01 92 02 aa 02 bc 02 7c 01 7d 01 7e 01 7f 01 80 01 20 02 22 02 | y.....z.{.........|.}.~.......". |
| 14d00 | 17 02 01 03 81 01 c4 02 82 01 83 01 84 01 85 01 c0 02 86 01 87 01 88 01 e6 00 89 01 e5 00 0f 01 | ................................ |
| 14d20 | 8a 01 8b 01 8c 01 e7 00 8d 01 8e 01 8f 01 94 01 9d 02 90 01 91 01 c1 02 95 01 96 01 97 01 98 01 | ................................ |
| 14d40 | 99 01 9a 01 9b 01 9c 01 9c 02 9d 01 9f 02 ea 00 8e 02 93 01 92 01 9e 01 9f 01 a0 01 c7 02 a1 01 | ................................ |
| 14d60 | a2 01 a3 01 a4 01 a5 01 dc 01 a7 01 a6 01 a8 01 a9 01 aa 01 ae 01 ab 01 ac 01 b0 01 af 01 b1 01 | ................................ |
| 14d80 | b2 01 ad 01 b3 01 b4 01 b5 01 b6 01 b7 01 bb 01 b8 01 b9 01 ba 01 19 02 bc 01 be 01 bd 01 bf 01 | ................................ |
| 14da0 | da 02 c0 01 c6 02 c1 01 04 03 c2 01 c3 01 c4 01 c6 01 c5 01 1a 02 c7 01 c8 01 98 02 c9 01 ca 01 | ................................ |
| 14dc0 | ef 01 cb 01 ce 01 cd 01 cf 01 0c 02 0d 02 cc 01 d0 01 03 03 d1 01 d2 01 d3 01 d4 01 bf 02 d5 01 | ................................ |
| 14de0 | da 01 db 01 ab 02 d7 02 d3 02 04 02 62 01 63 01 64 01 65 01 66 01 67 01 06 02 05 02 d6 01 d7 01 | ............b.c.d.e.f.g......... |
| 14e00 | d8 01 d9 01 1e 02 d1 03 d3 03 5d 03 d5 03 bd 03 d7 03 d9 03 db 03 99 03 dd 03 df 03 e1 03 8d 03 | ..........]..................... |
| 14e20 | e3 03 e5 03 e7 03 e9 03 eb 03 3b 03 a3 03 ed 03 ef 03 15 03 f1 03 c5 03 cd 03 87 03 29 03 81 03 | ..........;.................)... |
| 14e40 | f3 03 f5 03 f7 03 f9 03 fb 03 91 03 fd 03 ff 03 9b 03 01 04 b5 03 03 04 05 04 07 04 45 03 09 04 | ............................E... |
| 14e60 | 0b 04 0d 04 0f 04 11 04 13 04 15 04 a5 03 17 04 9f 03 19 04 1b 04 a7 03 1d 04 1f 04 21 04 23 04 | ............................!.#. |
| 14e80 | 25 04 73 03 27 04 29 04 2b 04 2d 04 2f 04 31 04 33 04 19 03 35 04 83 03 8f 03 37 04 39 04 6f 03 | %.s.'.).+.-./.1.3...5.....7.9.o. |
| 14ea0 | 3b 04 31 03 3d 04 3f 04 33 03 a1 03 41 04 43 04 45 04 47 04 49 04 47 03 7d 03 4b 04 4d 04 4f 04 | ;.1.=.?.3...A.C.E.G.I.G.}.K.M.O. |
| 14ec0 | 51 04 53 04 55 04 49 03 57 04 59 04 5b 04 a9 03 5d 04 5f 04 61 04 63 04 65 04 67 04 69 04 6b 04 | Q.S.U.I.W.Y.[...]._.a.c.e.g.i.k. |
| 14ee0 | 6d 04 6f 04 71 04 73 04 75 04 11 03 5b 03 77 04 79 04 7b 04 7d 04 7f 04 bb 03 8b 03 81 04 71 03 | m.o.q.s.u...[.w.y.{.}.........q. |
| 14f00 | 83 04 85 04 2f 03 87 04 89 04 8b 04 57 03 8d 04 6b 03 79 03 8f 04 91 04 93 04 53 03 69 03 95 04 | ..../.......W...k.y.......S.i... |
| 14f20 | 97 04 c9 03 99 04 9b 04 9d 04 ab 03 9f 04 85 03 a1 04 a3 04 a5 04 35 03 93 03 75 03 a7 04 a9 04 | ......................5...u..... |
| 14f40 | ab 04 b7 03 ad 04 af 04 2d 03 b1 04 b3 04 3d 03 55 03 4d 03 b5 04 b7 04 b9 04 37 03 bb 04 bd 04 | ........-.....=.U.M.......7..... |
| 14f60 | 2b 03 bf 04 c1 04 6d 03 c3 04 c5 04 ad 03 c7 04 c9 04 cb 04 cd 04 cf 04 77 03 bf 03 7b 03 d1 04 | +.....m.................w...{... |
| 14f80 | 39 03 51 03 9d 03 95 03 d3 04 d5 04 17 03 67 03 b3 03 89 03 d7 04 d9 04 4b 03 1f 03 1d 03 db 04 | 9.Q...........g.........K....... |
| 14fa0 | dd 04 df 04 23 03 21 03 61 03 e1 04 e3 04 e5 04 4f 03 e7 04 e9 04 eb 04 ed 04 ef 04 af 03 f1 04 | ....#.!.a.......O............... |
| 14fc0 | f3 04 f5 04 f7 04 f9 04 fb 04 fd 04 ff 04 01 05 03 05 05 05 07 05 09 05 27 03 65 03 0b 05 0d 05 | ........................'.e..... |
| 14fe0 | 0f 05 59 03 11 05 13 05 c3 03 43 03 25 03 15 05 17 05 19 05 1b 05 1d 05 1f 05 21 05 23 05 25 05 | ..Y.......C.%.............!.#.%. |
| 15000 | 27 05 29 05 2b 05 2d 05 2f 05 cf 03 31 05 33 05 cb 03 35 05 37 05 39 05 3b 05 3d 05 3f 05 41 05 | '.).+.-./...1.3...5.7.9.;.=.?.A. |
| 15020 | 43 05 45 05 63 03 b1 03 47 05 c7 03 49 05 4b 05 4d 05 4f 05 51 05 53 05 55 05 5f 03 57 05 59 05 | C.E.c...G...I.K.M.O.Q.S.U._.W.Y. |
| 15040 | 5b 05 c1 03 3f 03 13 03 5d 05 5f 05 1b 03 41 03 b9 03 7f 03 97 03 05 03 0c 03 7e 02 81 02 80 02 | [...?...]._...A...........~..... |
| 15060 | 0d 03 7f 02 65 02 8c 02 69 02 6a 02 67 02 68 02 84 02 06 03 6b 02 6c 02 4f 02 57 02 0e 03 0f 03 | ....e...i.j.g.h.....k.l.O.W..... |
| 15080 | 59 02 5b 02 70 02 35 02 33 02 32 02 34 02 36 02 7c 02 7d 02 6e 02 83 02 6d 02 6f 02 5e 02 5d 02 | Y.[.p.5.3.2.4.6.|.}.n...m.o.^.]. |
| 150a0 | 85 02 4d 02 4c 02 4e 02 41 02 4b 02 64 02 66 02 62 02 01 02 f8 01 63 02 61 02 82 02 fc 01 fb 01 | ..M.L.N.A.K.d.f.b.....c.a....... |
| 150c0 | 02 02 fd 01 78 02 74 02 7b 02 73 02 7a 02 72 02 79 02 77 02 76 02 71 02 86 02 87 02 89 02 8b 02 | ....x.t.{.s.z.r.y.w.v.q......... |
| 150e0 | 8a 02 88 02 75 02 03 02 fe 01 10 03 50 02 52 02 56 02 54 02 55 02 53 02 ff 01 60 02 fa 01 58 02 | ....u.......P.R.V.T.U.S...`...X. |
| 15100 | 00 02 5f 02 2b 02 26 02 2c 02 24 02 29 02 23 02 2e 02 2d 02 2f 02 2a 02 27 02 28 02 25 02 30 02 | .._.+.&.,.$.).#...-./.*.'.(.%.0. |
| 15120 | 31 02 5a 02 f9 01 38 02 37 02 39 02 3a 02 11 00 12 00 5c 02 45 02 3e 02 46 02 3c 02 43 02 3b 02 | 1.Z...8.7.9.:.....\.E.>.F.<.C.;. |
| 15140 | 49 02 48 02 4a 02 44 02 42 02 47 02 3d 02 3f 02 51 02 40 02 7e 02 81 02 80 02 0d 03 7f 02 65 02 | I.H.J.D.B.G.=.?.Q.@.~.........e. |
| 15160 | 8c 02 69 02 6a 02 67 02 68 02 84 02 06 03 6b 02 6c 02 4f 02 57 02 0e 03 0f 03 59 02 5b 02 70 02 | ..i.j.g.h.....k.l.O.W.....Y.[.p. |
| 15180 | 35 02 33 02 32 02 34 02 36 02 7c 02 7d 02 6e 02 83 02 6d 02 6f 02 5e 02 5d 02 85 02 4d 02 4c 02 | 5.3.2.4.6.|.}.n...m.o.^.]...M.L. |
| 151a0 | 4e 02 41 02 4b 02 64 02 66 02 62 02 01 02 f8 01 63 02 61 02 82 02 fc 01 fb 01 02 02 fd 01 78 02 | N.A.K.d.f.b.....c.a...........x. |
| 151c0 | 74 02 7b 02 73 02 7a 02 72 02 79 02 77 02 76 02 71 02 86 02 87 02 89 02 8b 02 8a 02 88 02 75 02 | t.{.s.z.r.y.w.v.q.............u. |
| 151e0 | 03 02 fe 01 10 03 50 02 52 02 56 02 54 02 55 02 53 02 ff 01 60 02 fa 01 58 02 00 02 5f 02 2b 02 | ......P.R.V.T.U.S...`...X..._.+. |
| 15200 | 26 02 2c 02 24 02 29 02 23 02 2e 02 2d 02 2f 02 2a 02 27 02 28 02 25 02 30 02 31 02 5a 02 f9 01 | &.,.$.).#...-./.*.'.(.%.0.1.Z... |
| 15220 | 38 02 37 02 39 02 3a 02 11 00 12 00 5c 02 45 02 3e 02 46 02 3c 02 43 02 3b 02 49 02 48 02 4a 02 | 8.7.9.:.....\.E.>.F.<.C.;.I.H.J. |
| 15240 | 44 02 42 02 47 02 3d 02 3f 02 51 02 40 02 03 00 3f 50 72 6f 70 65 72 74 79 4c 65 6e 67 74 68 41 | D.B.G.=.?.Q.@...?PropertyLengthA |
| 15260 | 73 56 61 72 69 61 6e 74 40 40 59 41 4b 50 45 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 | sVariant@@YAKPEBUtagSERIALIZEDPR |
| 15280 | 4f 50 45 52 54 59 56 41 4c 55 45 40 40 4b 47 45 40 5a 00 3f 52 74 6c 43 6f 6e 76 65 72 74 50 72 | OPERTYVALUE@@KGE@Z.?RtlConvertPr |
| 152a0 | 6f 70 65 72 74 79 54 6f 56 61 72 69 61 6e 74 40 40 59 41 45 50 45 42 55 74 61 67 53 45 52 49 41 | opertyToVariant@@YAEPEBUtagSERIA |
| 152c0 | 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 47 50 45 41 55 74 61 67 50 52 4f 50 | LIZEDPROPERTYVALUE@@GPEAUtagPROP |
| 152e0 | 56 41 52 49 41 4e 54 40 40 50 45 41 56 50 4d 65 6d 6f 72 79 41 6c 6c 6f 63 61 74 6f 72 40 40 40 | VARIANT@@PEAVPMemoryAllocator@@@ |
| 15300 | 5a 00 3f 52 74 6c 43 6f 6e 76 65 72 74 56 61 72 69 61 6e 74 54 6f 50 72 6f 70 65 72 74 79 40 40 | Z.?RtlConvertVariantToProperty@@ |
| 15320 | 59 41 50 45 41 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 45 | YAPEAUtagSERIALIZEDPROPERTYVALUE |
| 15340 | 40 40 50 45 42 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e 54 40 40 47 50 45 41 55 31 40 50 45 41 | @@PEBUtagPROPVARIANT@@GPEAU1@PEA |
| 15360 | 4b 4b 45 32 40 5a 00 43 73 72 41 6c 6c 6f 63 61 74 65 43 61 70 74 75 72 65 42 75 66 66 65 72 00 | KKE2@Z.CsrAllocateCaptureBuffer. |
| 15380 | 43 73 72 41 6c 6c 6f 63 61 74 65 4d 65 73 73 61 67 65 50 6f 69 6e 74 65 72 00 43 73 72 43 61 70 | CsrAllocateMessagePointer.CsrCap |
| 153a0 | 74 75 72 65 4d 65 73 73 61 67 65 42 75 66 66 65 72 00 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 | tureMessageBuffer.CsrCaptureMess |
| 153c0 | 61 67 65 4d 75 6c 74 69 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 73 49 6e 50 6c 61 63 65 00 43 73 | ageMultiUnicodeStringsInPlace.Cs |
| 153e0 | 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 53 74 72 69 6e 67 00 43 73 72 43 61 70 74 75 72 65 | rCaptureMessageString.CsrCapture |
| 15400 | 54 69 6d 65 6f 75 74 00 43 73 72 43 6c 69 65 6e 74 43 61 6c 6c 53 65 72 76 65 72 00 43 73 72 43 | Timeout.CsrClientCallServer.CsrC |
| 15420 | 6c 69 65 6e 74 43 6f 6e 6e 65 63 74 54 6f 53 65 72 76 65 72 00 43 73 72 46 72 65 65 43 61 70 74 | lientConnectToServer.CsrFreeCapt |
| 15440 | 75 72 65 42 75 66 66 65 72 00 43 73 72 47 65 74 50 72 6f 63 65 73 73 49 64 00 43 73 72 49 64 65 | ureBuffer.CsrGetProcessId.CsrIde |
| 15460 | 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54 68 72 65 61 64 00 43 73 72 4e 65 77 54 68 72 65 61 | ntifyAlertableThread.CsrNewThrea |
| 15480 | 64 00 43 73 72 50 72 6f 62 65 46 6f 72 52 65 61 64 00 43 73 72 50 72 6f 62 65 46 6f 72 57 72 69 | d.CsrProbeForRead.CsrProbeForWri |
| 154a0 | 74 65 00 43 73 72 53 65 74 50 72 69 6f 72 69 74 79 43 6c 61 73 73 00 44 62 67 42 72 65 61 6b 50 | te.CsrSetPriorityClass.DbgBreakP |
| 154c0 | 6f 69 6e 74 00 44 62 67 50 72 69 6e 74 00 44 62 67 50 72 69 6e 74 45 78 00 44 62 67 50 72 69 6e | oint.DbgPrint.DbgPrintEx.DbgPrin |
| 154e0 | 74 52 65 74 75 72 6e 43 6f 6e 74 72 6f 6c 43 00 44 62 67 50 72 6f 6d 70 74 00 44 62 67 51 75 65 | tReturnControlC.DbgPrompt.DbgQue |
| 15500 | 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 44 62 67 53 65 74 44 65 62 75 67 46 69 | ryDebugFilterState.DbgSetDebugFi |
| 15520 | 6c 74 65 72 53 74 61 74 65 00 44 62 67 55 69 43 6f 6e 6e 65 63 74 54 6f 44 62 67 00 44 62 67 55 | lterState.DbgUiConnectToDbg.DbgU |
| 15540 | 69 43 6f 6e 74 69 6e 75 65 00 44 62 67 55 69 43 6f 6e 76 65 72 74 53 74 61 74 65 43 68 61 6e 67 | iContinue.DbgUiConvertStateChang |
| 15560 | 65 53 74 72 75 63 74 75 72 65 00 44 62 67 55 69 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 | eStructure.DbgUiDebugActiveProce |
| 15580 | 73 73 00 44 62 67 55 69 47 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 00 44 62 67 | ss.DbgUiGetThreadDebugObject.Dbg |
| 155a0 | 55 69 49 73 73 75 65 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 00 44 62 67 55 69 52 65 6d 6f 74 65 | UiIssueRemoteBreakin.DbgUiRemote |
| 155c0 | 42 72 65 61 6b 69 6e 00 44 62 67 55 69 53 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 | Breakin.DbgUiSetThreadDebugObjec |
| 155e0 | 74 00 44 62 67 55 69 53 74 6f 70 44 65 62 75 67 67 69 6e 67 00 44 62 67 55 69 57 61 69 74 53 74 | t.DbgUiStopDebugging.DbgUiWaitSt |
| 15600 | 61 74 65 43 68 61 6e 67 65 00 44 62 67 55 73 65 72 42 72 65 61 6b 50 6f 69 6e 74 00 45 74 77 43 | ateChange.DbgUserBreakPoint.EtwC |
| 15620 | 6f 6e 74 72 6f 6c 54 72 61 63 65 41 00 45 74 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 57 00 45 74 | ontrolTraceA.EtwControlTraceW.Et |
| 15640 | 77 43 72 65 61 74 65 54 72 61 63 65 49 6e 73 74 61 6e 63 65 49 64 00 45 74 77 45 6e 61 62 6c 65 | wCreateTraceInstanceId.EtwEnable |
| 15660 | 54 72 61 63 65 00 45 74 77 45 6e 75 6d 65 72 61 74 65 54 72 61 63 65 47 75 69 64 73 00 45 74 77 | Trace.EtwEnumerateTraceGuids.Etw |
| 15680 | 46 6c 75 73 68 54 72 61 63 65 41 00 45 74 77 46 6c 75 73 68 54 72 61 63 65 57 00 45 74 77 47 65 | FlushTraceA.EtwFlushTraceW.EtwGe |
| 156a0 | 74 54 72 61 63 65 45 6e 61 62 6c 65 46 6c 61 67 73 00 45 74 77 47 65 74 54 72 61 63 65 45 6e 61 | tTraceEnableFlags.EtwGetTraceEna |
| 156c0 | 62 6c 65 4c 65 76 65 6c 00 45 74 77 47 65 74 54 72 61 63 65 4c 6f 67 67 65 72 48 61 6e 64 6c 65 | bleLevel.EtwGetTraceLoggerHandle |
| 156e0 | 00 45 74 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 41 00 45 74 | .EtwNotificationRegistrationA.Et |
| 15700 | 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 57 00 45 74 77 51 75 | wNotificationRegistrationW.EtwQu |
| 15720 | 65 72 79 41 6c 6c 54 72 61 63 65 73 41 00 45 74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73 57 | eryAllTracesA.EtwQueryAllTracesW |
| 15740 | 00 45 74 77 51 75 65 72 79 54 72 61 63 65 41 00 45 74 77 51 75 65 72 79 54 72 61 63 65 57 00 45 | .EtwQueryTraceA.EtwQueryTraceW.E |
| 15760 | 74 77 52 65 63 65 69 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 41 00 45 74 77 52 65 63 65 69 | twReceiveNotificationsA.EtwRecei |
| 15780 | 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 57 00 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 | veNotificationsW.EtwRegisterTrac |
| 157a0 | 65 47 75 69 64 73 41 00 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 57 00 45 | eGuidsA.EtwRegisterTraceGuidsW.E |
| 157c0 | 74 77 53 74 61 72 74 54 72 61 63 65 41 00 45 74 77 53 74 61 72 74 54 72 61 63 65 57 00 45 74 77 | twStartTraceA.EtwStartTraceW.Etw |
| 157e0 | 53 74 6f 70 54 72 61 63 65 41 00 45 74 77 53 74 6f 70 54 72 61 63 65 57 00 45 74 77 54 72 61 63 | StopTraceA.EtwStopTraceW.EtwTrac |
| 15800 | 65 45 76 65 6e 74 00 45 74 77 54 72 61 63 65 45 76 65 6e 74 49 6e 73 74 61 6e 63 65 00 45 74 77 | eEvent.EtwTraceEventInstance.Etw |
| 15820 | 54 72 61 63 65 4d 65 73 73 61 67 65 00 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65 56 61 00 45 | TraceMessage.EtwTraceMessageVa.E |
| 15840 | 74 77 55 6e 72 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 00 45 74 77 55 70 64 61 74 65 | twUnregisterTraceGuids.EtwUpdate |
| 15860 | 54 72 61 63 65 41 00 45 74 77 55 70 64 61 74 65 54 72 61 63 65 57 00 45 74 77 70 47 65 74 54 72 | TraceA.EtwUpdateTraceW.EtwpGetTr |
| 15880 | 61 63 65 42 75 66 66 65 72 00 45 74 77 70 53 65 74 48 57 43 6f 6e 66 69 67 46 75 6e 63 74 69 6f | aceBuffer.EtwpSetHWConfigFunctio |
| 158a0 | 6e 00 4b 69 52 61 69 73 65 55 73 65 72 45 78 63 65 70 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72 | n.KiRaiseUserExceptionDispatcher |
| 158c0 | 00 4b 69 55 73 65 72 41 70 63 44 69 73 70 61 74 63 68 65 72 00 4b 69 55 73 65 72 43 61 6c 6c 62 | .KiUserApcDispatcher.KiUserCallb |
| 158e0 | 61 63 6b 44 69 73 70 61 74 63 68 65 72 00 4b 69 55 73 65 72 45 78 63 65 70 74 69 6f 6e 44 69 73 | ackDispatcher.KiUserExceptionDis |
| 15900 | 70 61 74 63 68 65 72 00 4c 64 72 41 63 63 65 73 73 4f 75 74 4f 66 50 72 6f 63 65 73 73 52 65 73 | patcher.LdrAccessOutOfProcessRes |
| 15920 | 6f 75 72 63 65 00 4c 64 72 41 63 63 65 73 73 52 65 73 6f 75 72 63 65 00 4c 64 72 41 64 64 52 65 | ource.LdrAccessResource.LdrAddRe |
| 15940 | 66 44 6c 6c 00 4c 64 72 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 73 45 6e 61 62 6c 65 | fDll.LdrAlternateResourcesEnable |
| 15960 | 64 00 4c 64 72 43 72 65 61 74 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 00 4c 64 72 | d.LdrCreateOutOfProcessImage.Ldr |
| 15980 | 44 65 73 74 72 6f 79 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 00 4c 64 72 44 69 73 61 | DestroyOutOfProcessImage.LdrDisa |
| 159a0 | 62 6c 65 54 68 72 65 61 64 43 61 6c 6c 6f 75 74 73 46 6f 72 44 6c 6c 00 4c 64 72 45 6e 75 6d 52 | bleThreadCalloutsForDll.LdrEnumR |
| 159c0 | 65 73 6f 75 72 63 65 73 00 4c 64 72 45 6e 75 6d 65 72 61 74 65 4c 6f 61 64 65 64 4d 6f 64 75 6c | esources.LdrEnumerateLoadedModul |
| 159e0 | 65 73 00 4c 64 72 46 69 6e 64 43 72 65 61 74 65 50 72 6f 63 65 73 73 4d 61 6e 69 66 65 73 74 00 | es.LdrFindCreateProcessManifest. |
| 15a00 | 4c 64 72 46 69 6e 64 45 6e 74 72 79 46 6f 72 41 64 64 72 65 73 73 00 4c 64 72 46 69 6e 64 52 65 | LdrFindEntryForAddress.LdrFindRe |
| 15a20 | 73 6f 75 72 63 65 44 69 72 65 63 74 6f 72 79 5f 55 00 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 | sourceDirectory_U.LdrFindResourc |
| 15a40 | 65 45 78 5f 55 00 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 5f 55 00 4c 64 72 46 6c 75 73 68 | eEx_U.LdrFindResource_U.LdrFlush |
| 15a60 | 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 73 00 4c 64 72 47 65 74 44 | AlternateResourceModules.LdrGetD |
| 15a80 | 6c 6c 48 61 6e 64 6c 65 00 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 45 78 00 4c 64 72 47 65 | llHandle.LdrGetDllHandleEx.LdrGe |
| 15aa0 | 74 4b 6e 6f 77 6e 44 6c 6c 53 65 63 74 69 6f 6e 48 61 6e 64 6c 65 00 4c 64 72 47 65 74 50 72 6f | tKnownDllSectionHandle.LdrGetPro |
| 15ac0 | 63 65 64 75 72 65 41 64 64 72 65 73 73 00 4c 64 72 48 6f 74 50 61 74 63 68 52 6f 75 74 69 6e 65 | cedureAddress.LdrHotPatchRoutine |
| 15ae0 | 00 4c 64 72 49 6e 69 74 53 68 69 6d 45 6e 67 69 6e 65 44 79 6e 61 6d 69 63 00 4c 64 72 49 6e 69 | .LdrInitShimEngineDynamic.LdrIni |
| 15b00 | 74 69 61 6c 69 7a 65 54 68 75 6e 6b 00 4c 64 72 4c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 | tializeThunk.LdrLoadAlternateRes |
| 15b20 | 6f 75 72 63 65 4d 6f 64 75 6c 65 00 4c 64 72 4c 6f 61 64 44 6c 6c 00 4c 64 72 4c 6f 63 6b 4c 6f | ourceModule.LdrLoadDll.LdrLockLo |
| 15b40 | 61 64 65 72 4c 6f 63 6b 00 4c 64 72 4f 70 65 6e 49 6d 61 67 65 46 69 6c 65 4f 70 74 69 6f 6e 73 | aderLock.LdrOpenImageFileOptions |
| 15b60 | 4b 65 79 00 4c 64 72 50 72 6f 63 65 73 73 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 43 6f 6d 70 | Key.LdrProcessInitializationComp |
| 15b80 | 6c 65 74 65 00 4c 64 72 50 72 6f 63 65 73 73 52 65 6c 6f 63 61 74 69 6f 6e 42 6c 6f 63 6b 00 4c | lete.LdrProcessRelocationBlock.L |
| 15ba0 | 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 | drQueryImageFileExecutionOptions |
| 15bc0 | 00 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f | .LdrQueryImageFileExecutionOptio |
| 15be0 | 6e 73 45 78 00 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 4b 65 79 4f 70 74 69 6f 6e 00 | nsEx.LdrQueryImageFileKeyOption. |
| 15c00 | 4c 64 72 51 75 65 72 79 50 72 6f 63 65 73 73 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e | LdrQueryProcessModuleInformation |
| 15c20 | 00 4c 64 72 53 65 74 41 70 70 43 6f 6d 70 61 74 44 6c 6c 52 65 64 69 72 65 63 74 69 6f 6e 43 61 | .LdrSetAppCompatDllRedirectionCa |
| 15c40 | 6c 6c 62 61 63 6b 00 4c 64 72 53 65 74 44 6c 6c 4d 61 6e 69 66 65 73 74 50 72 6f 62 65 72 00 4c | llback.LdrSetDllManifestProber.L |
| 15c60 | 64 72 53 68 75 74 64 6f 77 6e 50 72 6f 63 65 73 73 00 4c 64 72 53 68 75 74 64 6f 77 6e 54 68 72 | drShutdownProcess.LdrShutdownThr |
| 15c80 | 65 61 64 00 4c 64 72 55 6e 6c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f | ead.LdrUnloadAlternateResourceMo |
| 15ca0 | 64 75 6c 65 00 4c 64 72 55 6e 6c 6f 61 64 44 6c 6c 00 4c 64 72 55 6e 6c 6f 63 6b 4c 6f 61 64 65 | dule.LdrUnloadDll.LdrUnlockLoade |
| 15cc0 | 72 4c 6f 63 6b 00 4c 64 72 56 65 72 69 66 79 49 6d 61 67 65 4d 61 74 63 68 65 73 43 68 65 63 6b | rLock.LdrVerifyImageMatchesCheck |
| 15ce0 | 73 75 6d 00 4e 6c 73 41 6e 73 69 43 6f 64 65 50 61 67 65 00 4e 6c 73 4d 62 43 6f 64 65 50 61 67 | sum.NlsAnsiCodePage.NlsMbCodePag |
| 15d00 | 65 54 61 67 00 4e 6c 73 4d 62 4f 65 6d 43 6f 64 65 50 61 67 65 54 61 67 00 4e 74 41 63 63 65 70 | eTag.NlsMbOemCodePageTag.NtAccep |
| 15d20 | 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 00 4e 74 41 63 63 | tConnectPort.NtAccessCheck.NtAcc |
| 15d40 | 65 73 73 43 68 65 63 6b 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 41 63 63 65 73 73 43 68 | essCheckAndAuditAlarm.NtAccessCh |
| 15d60 | 65 63 6b 42 79 54 79 70 65 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 41 6e 64 | eckByType.NtAccessCheckByTypeAnd |
| 15d80 | 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 | AuditAlarm.NtAccessCheckByTypeRe |
| 15da0 | 73 75 6c 74 4c 69 73 74 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 | sultList.NtAccessCheckByTypeResu |
| 15dc0 | 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 41 63 63 65 73 73 43 68 65 63 | ltListAndAuditAlarm.NtAccessChec |
| 15de0 | 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 | kByTypeResultListAndAuditAlarmBy |
| 15e00 | 48 61 6e 64 6c 65 00 4e 74 41 64 64 41 74 6f 6d 00 4e 74 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 | Handle.NtAddAtom.NtAddBootEntry. |
| 15e20 | 4e 74 41 64 64 44 72 69 76 65 72 45 6e 74 72 79 00 4e 74 41 64 6a 75 73 74 47 72 6f 75 70 73 54 | NtAddDriverEntry.NtAdjustGroupsT |
| 15e40 | 6f 6b 65 6e 00 4e 74 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 4e 74 41 | oken.NtAdjustPrivilegesToken.NtA |
| 15e60 | 6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 61 64 00 4e 74 41 6c 65 72 74 54 68 72 65 61 64 00 4e | lertResumeThread.NtAlertThread.N |
| 15e80 | 74 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 00 4e 74 41 6c 6c 6f 63 | tAllocateLocallyUniqueId.NtAlloc |
| 15ea0 | 61 74 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 4e 74 41 6c 6c 6f 63 61 74 65 55 | ateUserPhysicalPages.NtAllocateU |
| 15ec0 | 75 69 64 73 00 4e 74 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 41 | uids.NtAllocateVirtualMemory.NtA |
| 15ee0 | 70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 00 4e 74 41 72 65 4d 61 70 70 65 64 46 69 | pphelpCacheControl.NtAreMappedFi |
| 15f00 | 6c 65 73 54 68 65 53 61 6d 65 00 4e 74 41 73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f | lesTheSame.NtAssignProcessToJobO |
| 15f20 | 62 6a 65 63 74 00 4e 74 43 61 6c 6c 62 61 63 6b 52 65 74 75 72 6e 00 4e 74 43 61 6e 63 65 6c 44 | bject.NtCallbackReturn.NtCancelD |
| 15f40 | 65 76 69 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74 00 4e 74 43 61 6e 63 65 6c 49 6f 46 69 6c | eviceWakeupRequest.NtCancelIoFil |
| 15f60 | 65 00 4e 74 43 61 6e 63 65 6c 54 69 6d 65 72 00 4e 74 43 6c 65 61 72 45 76 65 6e 74 00 4e 74 43 | e.NtCancelTimer.NtClearEvent.NtC |
| 15f80 | 6c 6f 73 65 00 4e 74 43 6c 6f 73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 43 | lose.NtCloseObjectAuditAlarm.NtC |
| 15fa0 | 6f 6d 70 61 63 74 4b 65 79 73 00 4e 74 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 4e 74 43 6f 6d | ompactKeys.NtCompareTokens.NtCom |
| 15fc0 | 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 4e 74 43 6f 6d 70 72 65 73 73 4b 65 79 00 4e | pleteConnectPort.NtCompressKey.N |
| 15fe0 | 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 4e 74 43 6f 6e 74 69 6e 75 65 00 4e 74 43 72 65 61 74 65 | tConnectPort.NtContinue.NtCreate |
| 16000 | 44 65 62 75 67 4f 62 6a 65 63 74 00 4e 74 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a | DebugObject.NtCreateDirectoryObj |
| 16020 | 65 63 74 00 4e 74 43 72 65 61 74 65 45 76 65 6e 74 00 4e 74 43 72 65 61 74 65 45 76 65 6e 74 50 | ect.NtCreateEvent.NtCreateEventP |
| 16040 | 61 69 72 00 4e 74 43 72 65 61 74 65 46 69 6c 65 00 4e 74 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c | air.NtCreateFile.NtCreateIoCompl |
| 16060 | 65 74 69 6f 6e 00 4e 74 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 4e 74 43 72 65 61 74 65 | etion.NtCreateJobObject.NtCreate |
| 16080 | 4a 6f 62 53 65 74 00 4e 74 43 72 65 61 74 65 4b 65 79 00 4e 74 43 72 65 61 74 65 4b 65 79 65 64 | JobSet.NtCreateKey.NtCreateKeyed |
| 160a0 | 45 76 65 6e 74 00 4e 74 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 4e 74 43 72 65 | Event.NtCreateMailslotFile.NtCre |
| 160c0 | 61 74 65 4d 75 74 61 6e 74 00 4e 74 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 00 | ateMutant.NtCreateNamedPipeFile. |
| 160e0 | 4e 74 43 72 65 61 74 65 50 61 67 69 6e 67 46 69 6c 65 00 4e 74 43 72 65 61 74 65 50 6f 72 74 00 | NtCreatePagingFile.NtCreatePort. |
| 16100 | 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 00 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 | NtCreateProcess.NtCreateProcessE |
| 16120 | 78 00 4e 74 43 72 65 61 74 65 50 72 6f 66 69 6c 65 00 4e 74 43 72 65 61 74 65 53 65 63 74 69 6f | x.NtCreateProfile.NtCreateSectio |
| 16140 | 6e 00 4e 74 43 72 65 61 74 65 53 65 6d 61 70 68 6f 72 65 00 4e 74 43 72 65 61 74 65 53 79 6d 62 | n.NtCreateSemaphore.NtCreateSymb |
| 16160 | 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 4e 74 43 72 65 61 74 65 54 68 72 65 61 64 00 4e 74 | olicLinkObject.NtCreateThread.Nt |
| 16180 | 43 72 65 61 74 65 54 69 6d 65 72 00 4e 74 43 72 65 61 74 65 54 6f 6b 65 6e 00 4e 74 43 72 65 61 | CreateTimer.NtCreateToken.NtCrea |
| 161a0 | 74 65 57 61 69 74 61 62 6c 65 50 6f 72 74 00 4e 74 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 | teWaitablePort.NtDebugActiveProc |
| 161c0 | 65 73 73 00 4e 74 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 00 4e 74 44 65 6c 61 79 45 78 65 63 75 | ess.NtDebugContinue.NtDelayExecu |
| 161e0 | 74 69 6f 6e 00 4e 74 44 65 6c 65 74 65 41 74 6f 6d 00 4e 74 44 65 6c 65 74 65 42 6f 6f 74 45 6e | tion.NtDeleteAtom.NtDeleteBootEn |
| 16200 | 74 72 79 00 4e 74 44 65 6c 65 74 65 44 72 69 76 65 72 45 6e 74 72 79 00 4e 74 44 65 6c 65 74 65 | try.NtDeleteDriverEntry.NtDelete |
| 16220 | 46 69 6c 65 00 4e 74 44 65 6c 65 74 65 4b 65 79 00 4e 74 44 65 6c 65 74 65 4f 62 6a 65 63 74 41 | File.NtDeleteKey.NtDeleteObjectA |
| 16240 | 75 64 69 74 41 6c 61 72 6d 00 4e 74 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 00 4e 74 44 65 76 | uditAlarm.NtDeleteValueKey.NtDev |
| 16260 | 69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 4e 74 44 69 73 70 6c 61 79 53 74 72 69 6e 67 | iceIoControlFile.NtDisplayString |
| 16280 | 00 4e 74 44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 00 4e 74 44 75 70 6c 69 63 61 74 65 54 6f | .NtDuplicateObject.NtDuplicateTo |
| 162a0 | 6b 65 6e 00 4e 74 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65 73 00 4e 74 45 6e 75 | ken.NtEnumerateBootEntries.NtEnu |
| 162c0 | 6d 65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 00 4e 74 45 6e 75 6d 65 72 61 74 65 4b | merateDriverEntries.NtEnumerateK |
| 162e0 | 65 79 00 4e 74 45 6e 75 6d 65 72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 | ey.NtEnumerateSystemEnvironmentV |
| 16300 | 61 6c 75 65 73 45 78 00 4e 74 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b 65 79 00 4e 74 45 78 | aluesEx.NtEnumerateValueKey.NtEx |
| 16320 | 74 65 6e 64 53 65 63 74 69 6f 6e 00 4e 74 46 69 6c 74 65 72 54 6f 6b 65 6e 00 4e 74 46 69 6e 64 | tendSection.NtFilterToken.NtFind |
| 16340 | 41 74 6f 6d 00 4e 74 46 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65 00 4e 74 46 6c 75 73 68 49 | Atom.NtFlushBuffersFile.NtFlushI |
| 16360 | 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 4e 74 46 6c 75 73 68 4b 65 79 00 4e 74 46 6c 75 | nstructionCache.NtFlushKey.NtFlu |
| 16380 | 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 | shVirtualMemory.NtFlushWriteBuff |
| 163a0 | 65 72 00 4e 74 46 72 65 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 4e 74 46 72 65 | er.NtFreeUserPhysicalPages.NtFre |
| 163c0 | 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 4e | eVirtualMemory.NtFsControlFile.N |
| 163e0 | 74 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 4e 74 47 65 74 43 75 72 72 65 6e 74 50 72 | tGetContextThread.NtGetCurrentPr |
| 16400 | 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 4e 74 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 | ocessorNumber.NtGetDevicePowerSt |
| 16420 | 61 74 65 00 4e 74 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 4e 74 47 65 74 54 69 63 6b | ate.NtGetPlugPlayEvent.NtGetTick |
| 16440 | 43 6f 75 6e 74 00 4e 74 47 65 74 57 72 69 74 65 57 61 74 63 68 00 4e 74 49 6d 70 65 72 73 6f 6e | Count.NtGetWriteWatch.NtImperson |
| 16460 | 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 00 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 43 | ateAnonymousToken.NtImpersonateC |
| 16480 | 6c 69 65 6e 74 4f 66 50 6f 72 74 00 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 00 | lientOfPort.NtImpersonateThread. |
| 164a0 | 4e 74 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74 72 79 00 4e 74 49 6e 69 74 69 61 74 65 50 | NtInitializeRegistry.NtInitiateP |
| 164c0 | 6f 77 65 72 41 63 74 69 6f 6e 00 4e 74 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f 62 00 4e 74 49 73 | owerAction.NtIsProcessInJob.NtIs |
| 164e0 | 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 4e 74 4c 69 73 74 65 6e 50 6f | SystemResumeAutomatic.NtListenPo |
| 16500 | 72 74 00 4e 74 4c 6f 61 64 44 72 69 76 65 72 00 4e 74 4c 6f 61 64 4b 65 79 00 4e 74 4c 6f 61 64 | rt.NtLoadDriver.NtLoadKey.NtLoad |
| 16520 | 4b 65 79 32 00 4e 74 4c 6f 61 64 4b 65 79 45 78 00 4e 74 4c 6f 63 6b 46 69 6c 65 00 4e 74 4c 6f | Key2.NtLoadKeyEx.NtLockFile.NtLo |
| 16540 | 63 6b 50 72 6f 64 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 4e 74 4c 6f 63 6b 52 65 | ckProductActivationKeys.NtLockRe |
| 16560 | 67 69 73 74 72 79 4b 65 79 00 4e 74 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 | gistryKey.NtLockVirtualMemory.Nt |
| 16580 | 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 74 00 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 | MakePermanentObject.NtMakeTempor |
| 165a0 | 61 72 79 4f 62 6a 65 63 74 00 4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 | aryObject.NtMapUserPhysicalPages |
| 165c0 | 00 4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74 65 72 00 4e | .NtMapUserPhysicalPagesScatter.N |
| 165e0 | 74 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 4e 74 4d 6f 64 69 66 79 42 6f 6f 74 45 6e | tMapViewOfSection.NtModifyBootEn |
| 16600 | 74 72 79 00 4e 74 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72 79 00 4e 74 4e 6f 74 69 66 79 | try.NtModifyDriverEntry.NtNotify |
| 16620 | 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 4e 74 4e 6f 74 69 66 79 43 68 61 6e | ChangeDirectoryFile.NtNotifyChan |
| 16640 | 67 65 4b 65 79 00 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69 70 6c 65 4b 65 79 73 | geKey.NtNotifyChangeMultipleKeys |
| 16660 | 00 4e 74 4f 70 65 6e 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 4e 74 4f 70 65 6e 45 76 65 | .NtOpenDirectoryObject.NtOpenEve |
| 16680 | 6e 74 00 4e 74 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 4e 74 4f 70 65 6e 46 69 6c 65 00 4e 74 | nt.NtOpenEventPair.NtOpenFile.Nt |
| 166a0 | 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 4e 74 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 | OpenIoCompletion.NtOpenJobObject |
| 166c0 | 00 4e 74 4f 70 65 6e 4b 65 79 00 4e 74 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e 74 00 4e 74 4f 70 | .NtOpenKey.NtOpenKeyedEvent.NtOp |
| 166e0 | 65 6e 4d 75 74 61 6e 74 00 4e 74 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 | enMutant.NtOpenObjectAuditAlarm. |
| 16700 | 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 00 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e | NtOpenProcess.NtOpenProcessToken |
| 16720 | 00 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 00 4e 74 4f 70 65 6e 53 65 63 74 | .NtOpenProcessTokenEx.NtOpenSect |
| 16740 | 69 6f 6e 00 4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 4e 74 4f 70 65 6e 53 79 6d 62 6f 6c | ion.NtOpenSemaphore.NtOpenSymbol |
| 16760 | 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 4e 74 4f 70 65 6e 54 68 72 65 61 64 00 4e 74 4f 70 65 6e | icLinkObject.NtOpenThread.NtOpen |
| 16780 | 54 68 72 65 61 64 54 6f 6b 65 6e 00 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 45 78 00 | ThreadToken.NtOpenThreadTokenEx. |
| 167a0 | 4e 74 4f 70 65 6e 54 69 6d 65 72 00 4e 74 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c 00 4e 74 | NtOpenTimer.NtPlugPlayControl.Nt |
| 167c0 | 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4e 74 50 72 69 76 69 6c 65 67 65 43 68 65 63 | PowerInformation.NtPrivilegeChec |
| 167e0 | 6b 00 4e 74 50 72 69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 | k.NtPrivilegeObjectAuditAlarm.Nt |
| 16800 | 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 00 4e 74 50 72 | PrivilegedServiceAuditAlarm.NtPr |
| 16820 | 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 50 75 6c 73 65 45 76 65 6e 74 00 | otectVirtualMemory.NtPulseEvent. |
| 16840 | 4e 74 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 4e 74 51 75 65 72 79 42 6f 6f | NtQueryAttributesFile.NtQueryBoo |
| 16860 | 74 45 6e 74 72 79 4f 72 64 65 72 00 4e 74 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 4e | tEntryOrder.NtQueryBootOptions.N |
| 16880 | 74 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 4e 74 51 75 65 72 79 44 65 | tQueryDebugFilterState.NtQueryDe |
| 168a0 | 66 61 75 6c 74 4c 6f 63 61 6c 65 00 4e 74 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 | faultLocale.NtQueryDefaultUILang |
| 168c0 | 75 61 67 65 00 4e 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 4e 74 51 75 65 72 | uage.NtQueryDirectoryFile.NtQuer |
| 168e0 | 79 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 4e 74 51 75 65 72 79 44 72 69 76 65 72 45 6e | yDirectoryObject.NtQueryDriverEn |
| 16900 | 74 72 79 4f 72 64 65 72 00 4e 74 51 75 65 72 79 45 61 46 69 6c 65 00 4e 74 51 75 65 72 79 45 76 | tryOrder.NtQueryEaFile.NtQueryEv |
| 16920 | 65 6e 74 00 4e 74 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 4e 74 | ent.NtQueryFullAttributesFile.Nt |
| 16940 | 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 00 4e 74 51 75 65 72 79 49 6e 66 6f | QueryInformationAtom.NtQueryInfo |
| 16960 | 72 6d 61 74 69 6f 6e 46 69 6c 65 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f | rmationFile.NtQueryInformationJo |
| 16980 | 62 4f 62 6a 65 63 74 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 00 4e | bObject.NtQueryInformationPort.N |
| 169a0 | 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 4e 74 51 75 65 72 79 | tQueryInformationProcess.NtQuery |
| 169c0 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 | InformationThread.NtQueryInforma |
| 169e0 | 74 69 6f 6e 54 6f 6b 65 6e 00 4e 74 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 | tionToken.NtQueryInstallUILangua |
| 16a00 | 67 65 00 4e 74 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 4e 74 51 75 65 72 | ge.NtQueryIntervalProfile.NtQuer |
| 16a20 | 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 4e 74 51 75 65 72 79 4b 65 79 00 4e 74 51 75 65 72 79 | yIoCompletion.NtQueryKey.NtQuery |
| 16a40 | 4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 00 4e 74 51 75 65 72 79 4d 75 74 61 6e 74 00 4e | MultipleValueKey.NtQueryMutant.N |
| 16a60 | 74 51 75 65 72 79 4f 62 6a 65 63 74 00 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 00 | tQueryObject.NtQueryOpenSubKeys. |
| 16a80 | 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 00 4e 74 51 75 65 72 79 50 65 72 66 | NtQueryOpenSubKeysEx.NtQueryPerf |
| 16aa0 | 6f 72 6d 61 6e 63 65 43 6f 75 6e 74 65 72 00 4e 74 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 6d | ormanceCounter.NtQueryPortInform |
| 16ac0 | 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 4e 74 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 | ationProcess.NtQueryQuotaInforma |
| 16ae0 | 74 69 6f 6e 46 69 6c 65 00 4e 74 51 75 65 72 79 53 65 63 74 69 6f 6e 00 4e 74 51 75 65 72 79 53 | tionFile.NtQuerySection.NtQueryS |
| 16b00 | 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 4e 74 51 75 65 72 79 53 65 6d 61 70 68 6f 72 65 00 4e | ecurityObject.NtQuerySemaphore.N |
| 16b20 | 74 51 75 65 72 79 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 4e 74 51 75 65 72 79 | tQuerySymbolicLinkObject.NtQuery |
| 16b40 | 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 4e 74 51 75 65 72 79 53 79 | SystemEnvironmentValue.NtQuerySy |
| 16b60 | 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 4e 74 51 75 65 72 79 53 79 | stemEnvironmentValueEx.NtQuerySy |
| 16b80 | 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 4e 74 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d | stemInformation.NtQuerySystemTim |
| 16ba0 | 65 00 4e 74 51 75 65 72 79 54 69 6d 65 72 00 4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 73 6f 6c | e.NtQueryTimer.NtQueryTimerResol |
| 16bc0 | 75 74 69 6f 6e 00 4e 74 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 4e 74 51 75 65 72 79 56 69 72 | ution.NtQueryValueKey.NtQueryVir |
| 16be0 | 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 | tualMemory.NtQueryVolumeInformat |
| 16c00 | 69 6f 6e 46 69 6c 65 00 4e 74 51 75 65 75 65 41 70 63 54 68 72 65 61 64 00 4e 74 52 61 69 73 65 | ionFile.NtQueueApcThread.NtRaise |
| 16c20 | 45 78 63 65 70 74 69 6f 6e 00 4e 74 52 61 69 73 65 48 61 72 64 45 72 72 6f 72 00 4e 74 52 65 61 | Exception.NtRaiseHardError.NtRea |
| 16c40 | 64 46 69 6c 65 00 4e 74 52 65 61 64 46 69 6c 65 53 63 61 74 74 65 72 00 4e 74 52 65 61 64 52 65 | dFile.NtReadFileScatter.NtReadRe |
| 16c60 | 71 75 65 73 74 44 61 74 61 00 4e 74 52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 | questData.NtReadVirtualMemory.Nt |
| 16c80 | 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f 72 74 00 4e 74 52 65 | RegisterThreadTerminatePort.NtRe |
| 16ca0 | 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 00 4e 74 52 65 6c 65 61 73 65 4d 75 74 61 6e 74 00 | leaseKeyedEvent.NtReleaseMutant. |
| 16cc0 | 4e 74 52 65 6c 65 61 73 65 53 65 6d 61 70 68 6f 72 65 00 4e 74 52 65 6d 6f 76 65 49 6f 43 6f 6d | NtReleaseSemaphore.NtRemoveIoCom |
| 16ce0 | 70 6c 65 74 69 6f 6e 00 4e 74 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75 67 00 4e 74 52 | pletion.NtRemoveProcessDebug.NtR |
| 16d00 | 65 6e 61 6d 65 4b 65 79 00 4e 74 52 65 70 6c 61 63 65 4b 65 79 00 4e 74 52 65 70 6c 79 50 6f 72 | enameKey.NtReplaceKey.NtReplyPor |
| 16d20 | 74 00 4e 74 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 00 4e 74 52 65 70 6c 79 | t.NtReplyWaitReceivePort.NtReply |
| 16d40 | 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78 00 4e 74 52 65 70 6c 79 57 61 69 74 52 65 70 | WaitReceivePortEx.NtReplyWaitRep |
| 16d60 | 6c 79 50 6f 72 74 00 4e 74 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b 65 75 70 00 4e 74 52 | lyPort.NtRequestDeviceWakeup.NtR |
| 16d80 | 65 71 75 65 73 74 50 6f 72 74 00 4e 74 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 | equestPort.NtRequestWaitReplyPor |
| 16da0 | 74 00 4e 74 52 65 71 75 65 73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 4e 74 52 65 73 65 74 | t.NtRequestWakeupLatency.NtReset |
| 16dc0 | 45 76 65 6e 74 00 4e 74 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68 00 4e 74 52 65 73 74 6f 72 | Event.NtResetWriteWatch.NtRestor |
| 16de0 | 65 4b 65 79 00 4e 74 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 4e 74 52 65 73 75 6d 65 54 68 72 | eKey.NtResumeProcess.NtResumeThr |
| 16e00 | 65 61 64 00 4e 74 53 61 76 65 4b 65 79 00 4e 74 53 61 76 65 4b 65 79 45 78 00 4e 74 53 61 76 65 | ead.NtSaveKey.NtSaveKeyEx.NtSave |
| 16e20 | 4d 65 72 67 65 64 4b 65 79 73 00 4e 74 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 4e | MergedKeys.NtSecureConnectPort.N |
| 16e40 | 74 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 4e 74 53 65 74 42 6f 6f 74 4f 70 74 69 | tSetBootEntryOrder.NtSetBootOpti |
| 16e60 | 6f 6e 73 00 4e 74 53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 4e 74 53 65 74 44 65 62 75 | ons.NtSetContextThread.NtSetDebu |
| 16e80 | 67 46 69 6c 74 65 72 53 74 61 74 65 00 4e 74 53 65 74 44 65 66 61 75 6c 74 48 61 72 64 45 72 72 | gFilterState.NtSetDefaultHardErr |
| 16ea0 | 6f 72 50 6f 72 74 00 4e 74 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 4e 74 53 65 74 44 | orPort.NtSetDefaultLocale.NtSetD |
| 16ec0 | 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 4e 74 53 65 74 44 72 69 76 65 72 45 6e 74 72 | efaultUILanguage.NtSetDriverEntr |
| 16ee0 | 79 4f 72 64 65 72 00 4e 74 53 65 74 45 61 46 69 6c 65 00 4e 74 53 65 74 45 76 65 6e 74 00 4e 74 | yOrder.NtSetEaFile.NtSetEvent.Nt |
| 16f00 | 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 6f 72 69 74 79 00 4e 74 53 65 74 48 69 67 68 45 | SetEventBoostPriority.NtSetHighE |
| 16f20 | 76 65 6e 74 50 61 69 72 00 4e 74 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 | ventPair.NtSetHighWaitLowEventPa |
| 16f40 | 69 72 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 00 4e | ir.NtSetInformationDebugObject.N |
| 16f60 | 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 | tSetInformationFile.NtSetInforma |
| 16f80 | 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65 | tionJobObject.NtSetInformationKe |
| 16fa0 | 79 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 4e 74 53 65 74 49 6e | y.NtSetInformationObject.NtSetIn |
| 16fc0 | 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f | formationProcess.NtSetInformatio |
| 16fe0 | 6e 54 68 72 65 61 64 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 4e 74 | nThread.NtSetInformationToken.Nt |
| 17000 | 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 4e 74 53 65 74 49 6f 43 6f 6d 70 6c 65 | SetIntervalProfile.NtSetIoComple |
| 17020 | 74 69 6f 6e 00 4e 74 53 65 74 4c 64 74 45 6e 74 72 69 65 73 00 4e 74 53 65 74 4c 6f 77 45 76 65 | tion.NtSetLdtEntries.NtSetLowEve |
| 17040 | 6e 74 50 61 69 72 00 4e 74 53 65 74 4c 6f 77 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 | ntPair.NtSetLowWaitHighEventPair |
| 17060 | 00 4e 74 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 4e 74 53 65 74 | .NtSetQuotaInformationFile.NtSet |
| 17080 | 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 4e 74 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f | SecurityObject.NtSetSystemEnviro |
| 170a0 | 6e 6d 65 6e 74 56 61 6c 75 65 00 4e 74 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e | nmentValue.NtSetSystemEnvironmen |
| 170c0 | 74 56 61 6c 75 65 45 78 00 4e 74 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 | tValueEx.NtSetSystemInformation. |
| 170e0 | 4e 74 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 53 74 61 74 65 00 4e 74 53 65 74 53 79 73 74 65 | NtSetSystemPowerState.NtSetSyste |
| 17100 | 6d 54 69 6d 65 00 4e 74 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 61 74 65 00 | mTime.NtSetThreadExecutionState. |
| 17120 | 4e 74 53 65 74 54 69 6d 65 72 00 4e 74 53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 | NtSetTimer.NtSetTimerResolution. |
| 17140 | 4e 74 53 65 74 55 75 69 64 53 65 65 64 00 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 4e 74 53 65 | NtSetUuidSeed.NtSetValueKey.NtSe |
| 17160 | 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 4e 74 53 68 75 74 64 6f 77 | tVolumeInformationFile.NtShutdow |
| 17180 | 6e 53 79 73 74 65 6d 00 4e 74 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 | nSystem.NtSignalAndWaitForSingle |
| 171a0 | 4f 62 6a 65 63 74 00 4e 74 53 74 61 72 74 50 72 6f 66 69 6c 65 00 4e 74 53 74 6f 70 50 72 6f 66 | Object.NtStartProfile.NtStopProf |
| 171c0 | 69 6c 65 00 4e 74 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 4e 74 53 75 73 70 65 6e 64 54 68 | ile.NtSuspendProcess.NtSuspendTh |
| 171e0 | 72 65 61 64 00 4e 74 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 00 4e 74 54 65 72 6d | read.NtSystemDebugControl.NtTerm |
| 17200 | 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 4e 74 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 | inateJobObject.NtTerminateProces |
| 17220 | 73 00 4e 74 54 65 72 6d 69 6e 61 74 65 54 68 72 65 61 64 00 4e 74 54 65 73 74 41 6c 65 72 74 00 | s.NtTerminateThread.NtTestAlert. |
| 17240 | 4e 74 54 72 61 63 65 45 76 65 6e 74 00 4e 74 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 | NtTraceEvent.NtTranslateFilePath |
| 17260 | 00 4e 74 55 6e 6c 6f 61 64 44 72 69 76 65 72 00 4e 74 55 6e 6c 6f 61 64 4b 65 79 00 4e 74 55 6e | .NtUnloadDriver.NtUnloadKey.NtUn |
| 17280 | 6c 6f 61 64 4b 65 79 32 00 4e 74 55 6e 6c 6f 61 64 4b 65 79 45 78 00 4e 74 55 6e 6c 6f 63 6b 46 | loadKey2.NtUnloadKeyEx.NtUnlockF |
| 172a0 | 69 6c 65 00 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 55 6e 6d 61 | ile.NtUnlockVirtualMemory.NtUnma |
| 172c0 | 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 4e 74 56 64 6d 43 6f 6e 74 72 6f 6c 00 4e 74 57 61 | pViewOfSection.NtVdmControl.NtWa |
| 172e0 | 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e 74 00 4e 74 57 61 69 74 46 6f 72 4b 65 79 65 64 45 76 | itForDebugEvent.NtWaitForKeyedEv |
| 17300 | 65 6e 74 00 4e 74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 4e 74 57 | ent.NtWaitForMultipleObjects.NtW |
| 17320 | 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 33 32 00 4e 74 57 61 69 74 46 6f | aitForMultipleObjects32.NtWaitFo |
| 17340 | 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 4e 74 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 | rSingleObject.NtWaitHighEventPai |
| 17360 | 72 00 4e 74 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 4e 74 57 72 69 74 65 46 69 6c 65 | r.NtWaitLowEventPair.NtWriteFile |
| 17380 | 00 4e 74 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 4e 74 57 72 69 74 65 52 65 71 75 65 73 | .NtWriteFileGather.NtWriteReques |
| 173a0 | 74 44 61 74 61 00 4e 74 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 4e 74 59 69 65 | tData.NtWriteVirtualMemory.NtYie |
| 173c0 | 6c 64 45 78 65 63 75 74 69 6f 6e 00 50 66 78 46 69 6e 64 50 72 65 66 69 78 00 50 66 78 49 6e 69 | ldExecution.PfxFindPrefix.PfxIni |
| 173e0 | 74 69 61 6c 69 7a 65 00 50 66 78 49 6e 73 65 72 74 50 72 65 66 69 78 00 50 66 78 52 65 6d 6f 76 | tialize.PfxInsertPrefix.PfxRemov |
| 17400 | 65 50 72 65 66 69 78 00 52 74 6c 41 62 6f 72 74 52 58 61 63 74 00 52 74 6c 41 62 73 6f 6c 75 74 | ePrefix.RtlAbortRXact.RtlAbsolut |
| 17420 | 65 54 6f 53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 00 52 74 6c 41 63 71 75 69 72 65 50 65 62 4c | eToSelfRelativeSD.RtlAcquirePebL |
| 17440 | 6f 63 6b 00 52 74 6c 41 63 71 75 69 72 65 50 72 69 76 69 6c 65 67 65 00 52 74 6c 41 63 71 75 69 | ock.RtlAcquirePrivilege.RtlAcqui |
| 17460 | 72 65 52 65 73 6f 75 72 63 65 45 78 63 6c 75 73 69 76 65 00 52 74 6c 41 63 71 75 69 72 65 52 65 | reResourceExclusive.RtlAcquireRe |
| 17480 | 73 6f 75 72 63 65 53 68 61 72 65 64 00 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 | sourceShared.RtlActivateActivati |
| 174a0 | 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 | onContext.RtlActivateActivationC |
| 174c0 | 6f 6e 74 65 78 74 45 78 00 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f | ontextEx.RtlActivateActivationCo |
| 174e0 | 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 00 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f | ntextUnsafeFast.RtlAddAccessAllo |
| 17500 | 77 65 64 41 63 65 00 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 41 63 65 45 78 00 | wedAce.RtlAddAccessAllowedAceEx. |
| 17520 | 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 4f 62 6a 65 63 74 41 63 65 00 52 74 6c | RtlAddAccessAllowedObjectAce.Rtl |
| 17540 | 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65 00 52 74 6c 41 64 64 41 63 63 65 73 73 44 | AddAccessDeniedAce.RtlAddAccessD |
| 17560 | 65 6e 69 65 64 41 63 65 45 78 00 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 4f 62 6a | eniedAceEx.RtlAddAccessDeniedObj |
| 17580 | 65 63 74 41 63 65 00 52 74 6c 41 64 64 41 63 65 00 52 74 6c 41 64 64 41 63 74 69 6f 6e 54 6f 52 | ectAce.RtlAddAce.RtlAddActionToR |
| 175a0 | 58 61 63 74 00 52 74 6c 41 64 64 41 74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 41 64 | Xact.RtlAddAtomToAtomTable.RtlAd |
| 175c0 | 64 41 74 74 72 69 62 75 74 65 41 63 74 69 6f 6e 54 6f 52 58 61 63 74 00 52 74 6c 41 64 64 41 75 | dAttributeActionToRXact.RtlAddAu |
| 175e0 | 64 69 74 41 63 63 65 73 73 41 63 65 00 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 41 63 | ditAccessAce.RtlAddAuditAccessAc |
| 17600 | 65 45 78 00 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 4f 62 6a 65 63 74 41 63 65 00 52 | eEx.RtlAddAuditAccessObjectAce.R |
| 17620 | 74 6c 41 64 64 43 6f 6d 70 6f 75 6e 64 41 63 65 00 52 74 6c 41 64 64 46 75 6e 63 74 69 6f 6e 54 | tlAddCompoundAce.RtlAddFunctionT |
| 17640 | 61 62 6c 65 00 52 74 6c 41 64 64 52 65 66 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 | able.RtlAddRefActivationContext. |
| 17660 | 52 74 6c 41 64 64 52 65 66 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 41 64 64 56 65 63 74 | RtlAddRefMemoryStream.RtlAddVect |
| 17680 | 6f 72 65 64 43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 00 52 74 6c 41 64 64 56 65 63 74 6f 72 | oredContinueHandler.RtlAddVector |
| 176a0 | 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 52 74 6c 41 64 64 72 65 73 73 49 6e 53 | edExceptionHandler.RtlAddressInS |
| 176c0 | 65 63 74 69 6f 6e 54 61 62 6c 65 00 52 74 6c 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 00 52 | ectionTable.RtlAdjustPrivilege.R |
| 176e0 | 74 6c 41 6c 6c 6f 63 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b | tlAllocateActivationContextStack |
| 17700 | 00 52 74 6c 41 6c 6c 6f 63 61 74 65 41 6e 64 49 6e 69 74 69 61 6c 69 7a 65 53 69 64 00 52 74 6c | .RtlAllocateAndInitializeSid.Rtl |
| 17720 | 41 6c 6c 6f 63 61 74 65 48 61 6e 64 6c 65 00 52 74 6c 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 52 | AllocateHandle.RtlAllocateHeap.R |
| 17740 | 74 6c 41 6e 73 69 43 68 61 72 54 6f 55 6e 69 63 6f 64 65 43 68 61 72 00 52 74 6c 41 6e 73 69 53 | tlAnsiCharToUnicodeChar.RtlAnsiS |
| 17760 | 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 00 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 | tringToUnicodeSize.RtlAnsiString |
| 17780 | 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 41 70 70 65 6e 64 41 73 63 69 69 7a 54 | ToUnicodeString.RtlAppendAsciizT |
| 177a0 | 6f 53 74 72 69 6e 67 00 52 74 6c 41 70 70 65 6e 64 50 61 74 68 45 6c 65 6d 65 6e 74 00 52 74 6c | oString.RtlAppendPathElement.Rtl |
| 177c0 | 41 70 70 65 6e 64 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 52 74 6c 41 70 70 65 6e 64 55 6e | AppendStringToString.RtlAppendUn |
| 177e0 | 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 52 74 6c 41 70 70 65 6e 64 55 6e 69 | icodeStringToString.RtlAppendUni |
| 17800 | 63 6f 64 65 54 6f 53 74 72 69 6e 67 00 52 74 6c 41 70 70 6c 69 63 61 74 69 6f 6e 56 65 72 69 66 | codeToString.RtlApplicationVerif |
| 17820 | 69 65 72 53 74 6f 70 00 52 74 6c 41 70 70 6c 79 52 58 61 63 74 00 52 74 6c 41 70 70 6c 79 52 58 | ierStop.RtlApplyRXact.RtlApplyRX |
| 17840 | 61 63 74 4e 6f 46 6c 75 73 68 00 52 74 6c 41 72 65 41 6c 6c 41 63 63 65 73 73 65 73 47 72 61 6e | actNoFlush.RtlAreAllAccessesGran |
| 17860 | 74 65 64 00 52 74 6c 41 72 65 41 6e 79 41 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 00 52 74 6c | ted.RtlAreAnyAccessesGranted.Rtl |
| 17880 | 41 72 65 42 69 74 73 43 6c 65 61 72 00 52 74 6c 41 72 65 42 69 74 73 53 65 74 00 52 74 6c 41 73 | AreBitsClear.RtlAreBitsSet.RtlAs |
| 178a0 | 73 65 72 74 00 52 74 6c 43 61 6e 63 65 6c 54 69 6d 65 72 00 52 74 6c 43 61 70 74 75 72 65 43 6f | sert.RtlCancelTimer.RtlCaptureCo |
| 178c0 | 6e 74 65 78 74 00 52 74 6c 43 61 70 74 75 72 65 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 52 | ntext.RtlCaptureStackBackTrace.R |
| 178e0 | 74 6c 43 68 61 72 54 6f 49 6e 74 65 67 65 72 00 52 74 6c 43 68 65 63 6b 46 6f 72 4f 72 70 68 61 | tlCharToInteger.RtlCheckForOrpha |
| 17900 | 6e 65 64 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 73 00 52 74 6c 43 68 65 63 6b 50 72 6f 63 | nedCriticalSections.RtlCheckProc |
| 17920 | 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 52 74 6c 43 68 65 63 6b 52 65 67 69 73 74 72 79 4b 65 | essParameters.RtlCheckRegistryKe |
| 17940 | 79 00 52 74 6c 43 6c 65 61 72 41 6c 6c 42 69 74 73 00 52 74 6c 43 6c 65 61 72 42 69 74 73 00 52 | y.RtlClearAllBits.RtlClearBits.R |
| 17960 | 74 6c 43 6c 6f 6e 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 43 6f 6d 6d 69 74 4d 65 6d | tlCloneMemoryStream.RtlCommitMem |
| 17980 | 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 43 6f 6d 70 61 63 74 48 65 61 70 00 52 74 6c 43 6f 6d 70 | oryStream.RtlCompactHeap.RtlComp |
| 179a0 | 61 72 65 4d 65 6d 6f 72 79 00 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 55 6c 6f 6e 67 00 | areMemory.RtlCompareMemoryUlong. |
| 179c0 | 52 74 6c 43 6f 6d 70 61 72 65 53 74 72 69 6e 67 00 52 74 6c 43 6f 6d 70 61 72 65 55 6e 69 63 6f | RtlCompareString.RtlCompareUnico |
| 179e0 | 64 65 53 74 72 69 6e 67 00 52 74 6c 43 6f 6d 70 72 65 73 73 42 75 66 66 65 72 00 52 74 6c 43 6f | deString.RtlCompressBuffer.RtlCo |
| 17a00 | 6d 70 75 74 65 43 72 63 33 32 00 52 74 6c 43 6f 6d 70 75 74 65 49 6d 70 6f 72 74 54 61 62 6c 65 | mputeCrc32.RtlComputeImportTable |
| 17a20 | 48 61 73 68 00 52 74 6c 43 6f 6d 70 75 74 65 50 72 69 76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d 65 | Hash.RtlComputePrivatizedDllName |
| 17a40 | 5f 55 00 52 74 6c 43 6f 6e 73 6f 6c 65 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e | _U.RtlConsoleMultiByteToUnicodeN |
| 17a60 | 00 52 74 6c 43 6f 6e 76 65 72 74 45 78 63 6c 75 73 69 76 65 54 6f 53 68 61 72 65 64 00 52 74 6c | .RtlConvertExclusiveToShared.Rtl |
| 17a80 | 43 6f 6e 76 65 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c 75 73 69 76 65 00 52 74 6c 43 6f 6e 76 | ConvertSharedToExclusive.RtlConv |
| 17aa0 | 65 72 74 53 69 64 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 43 6f 6e 76 65 72 74 | ertSidToUnicodeString.RtlConvert |
| 17ac0 | 54 6f 41 75 74 6f 49 6e 68 65 72 69 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 43 | ToAutoInheritSecurityObject.RtlC |
| 17ae0 | 6f 6e 76 65 72 74 55 69 4c 69 73 74 54 6f 41 70 69 4c 69 73 74 00 52 74 6c 43 6f 70 79 4c 75 69 | onvertUiListToApiList.RtlCopyLui |
| 17b00 | 64 00 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e 64 41 74 74 72 69 62 75 74 65 73 41 72 72 61 79 00 | d.RtlCopyLuidAndAttributesArray. |
| 17b20 | 52 74 6c 43 6f 70 79 4d 61 70 70 65 64 4d 65 6d 6f 72 79 00 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 | RtlCopyMappedMemory.RtlCopyMemor |
| 17b40 | 79 00 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 4e 6f 6e 54 65 6d 70 6f 72 61 6c 00 52 74 6c 43 6f | y.RtlCopyMemoryNonTemporal.RtlCo |
| 17b60 | 70 79 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f 00 52 74 6c 43 6f 70 79 4f 75 74 4f 66 50 72 6f | pyMemoryStreamTo.RtlCopyOutOfPro |
| 17b80 | 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f 00 52 74 6c 43 6f 70 79 53 65 63 75 72 69 | cessMemoryStreamTo.RtlCopySecuri |
| 17ba0 | 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 43 6f 70 79 53 69 64 00 52 74 6c 43 6f 70 79 53 | tyDescriptor.RtlCopySid.RtlCopyS |
| 17bc0 | 69 64 41 6e 64 41 74 74 72 69 62 75 74 65 73 41 72 72 61 79 00 52 74 6c 43 6f 70 79 53 74 72 69 | idAndAttributesArray.RtlCopyStri |
| 17be0 | 6e 67 00 52 74 6c 43 6f 70 79 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 43 72 65 61 74 | ng.RtlCopyUnicodeString.RtlCreat |
| 17c00 | 65 41 63 6c 00 52 74 6c 43 72 65 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 | eAcl.RtlCreateActivationContext. |
| 17c20 | 52 74 6c 43 72 65 61 74 65 41 6e 64 53 65 74 53 44 00 52 74 6c 43 72 65 61 74 65 41 74 6f 6d 54 | RtlCreateAndSetSD.RtlCreateAtomT |
| 17c40 | 61 62 6c 65 00 52 74 6c 43 72 65 61 74 65 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 46 69 6c 65 | able.RtlCreateBootStatusDataFile |
| 17c60 | 00 52 74 6c 43 72 65 61 74 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 52 74 6c 43 72 65 61 74 65 48 | .RtlCreateEnvironment.RtlCreateH |
| 17c80 | 65 61 70 00 52 74 6c 43 72 65 61 74 65 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 52 | eap.RtlCreateProcessParameters.R |
| 17ca0 | 74 6c 43 72 65 61 74 65 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 52 74 6c 43 72 65 61 | tlCreateQueryDebugBuffer.RtlCrea |
| 17cc0 | 74 65 52 65 67 69 73 74 72 79 4b 65 79 00 52 74 6c 43 72 65 61 74 65 53 65 63 75 72 69 74 79 44 | teRegistryKey.RtlCreateSecurityD |
| 17ce0 | 65 73 63 72 69 70 74 6f 72 00 52 74 6c 43 72 65 61 74 65 53 79 73 74 65 6d 56 6f 6c 75 6d 65 49 | escriptor.RtlCreateSystemVolumeI |
| 17d00 | 6e 66 6f 72 6d 61 74 69 6f 6e 46 6f 6c 64 65 72 00 52 74 6c 43 72 65 61 74 65 54 61 67 48 65 61 | nformationFolder.RtlCreateTagHea |
| 17d20 | 70 00 52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 00 52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 51 | p.RtlCreateTimer.RtlCreateTimerQ |
| 17d40 | 75 65 75 65 00 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 43 | ueue.RtlCreateUnicodeString.RtlC |
| 17d60 | 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 46 72 6f 6d 41 73 63 69 69 7a 00 52 74 6c | reateUnicodeStringFromAsciiz.Rtl |
| 17d80 | 43 72 65 61 74 65 55 73 65 72 50 72 6f 63 65 73 73 00 52 74 6c 43 72 65 61 74 65 55 73 65 72 53 | CreateUserProcess.RtlCreateUserS |
| 17da0 | 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 43 72 65 61 74 65 55 73 65 72 54 68 72 65 61 | ecurityObject.RtlCreateUserThrea |
| 17dc0 | 64 00 52 74 6c 43 75 73 74 6f 6d 43 50 54 6f 55 6e 69 63 6f 64 65 4e 00 52 74 6c 43 75 74 6f 76 | d.RtlCustomCPToUnicodeN.RtlCutov |
| 17de0 | 65 72 54 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 52 74 6c 44 65 4e 6f 72 6d 61 6c 69 7a | erTimeToSystemTime.RtlDeNormaliz |
| 17e00 | 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 | eProcessParams.RtlDeactivateActi |
| 17e20 | 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 76 | vationContext.RtlDeactivateActiv |
| 17e40 | 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 00 52 74 6c 44 65 62 75 67 50 | ationContextUnsafeFast.RtlDebugP |
| 17e60 | 72 69 6e 74 54 69 6d 65 73 00 52 74 6c 44 65 63 6f 64 65 50 6f 69 6e 74 65 72 00 52 74 6c 44 65 | rintTimes.RtlDecodePointer.RtlDe |
| 17e80 | 63 6f 64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 00 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 42 | codeSystemPointer.RtlDecompressB |
| 17ea0 | 75 66 66 65 72 00 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 46 72 61 67 6d 65 6e 74 00 52 74 6c 44 | uffer.RtlDecompressFragment.RtlD |
| 17ec0 | 65 66 61 75 6c 74 4e 70 41 63 6c 00 52 74 6c 44 65 6c 65 74 65 00 52 74 6c 44 65 6c 65 74 65 41 | efaultNpAcl.RtlDelete.RtlDeleteA |
| 17ee0 | 63 65 00 52 74 6c 44 65 6c 65 74 65 41 74 6f 6d 46 72 6f 6d 41 74 6f 6d 54 61 62 6c 65 00 52 74 | ce.RtlDeleteAtomFromAtomTable.Rt |
| 17f00 | 6c 44 65 6c 65 74 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 44 65 6c 65 74 65 | lDeleteCriticalSection.RtlDelete |
| 17f20 | 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 52 74 6c 44 65 6c 65 74 65 45 6c 65 | ElementGenericTable.RtlDeleteEle |
| 17f40 | 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 52 74 6c 44 65 6c 65 74 65 46 75 6e | mentGenericTableAvl.RtlDeleteFun |
| 17f60 | 63 74 69 6f 6e 54 61 62 6c 65 00 52 74 6c 44 65 6c 65 74 65 4e 6f 53 70 6c 61 79 00 52 74 6c 44 | ctionTable.RtlDeleteNoSplay.RtlD |
| 17f80 | 65 6c 65 74 65 52 65 67 69 73 74 72 79 56 61 6c 75 65 00 52 74 6c 44 65 6c 65 74 65 52 65 73 6f | eleteRegistryValue.RtlDeleteReso |
| 17fa0 | 75 72 63 65 00 52 74 6c 44 65 6c 65 74 65 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c | urce.RtlDeleteSecurityObject.Rtl |
| 17fc0 | 44 65 6c 65 74 65 54 69 6d 65 72 00 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75 65 00 | DeleteTimer.RtlDeleteTimerQueue. |
| 17fe0 | 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75 65 45 78 00 52 74 6c 44 65 72 65 67 69 73 | RtlDeleteTimerQueueEx.RtlDeregis |
| 18000 | 74 65 72 57 61 69 74 00 52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 74 45 78 00 52 74 6c 44 | terWait.RtlDeregisterWaitEx.RtlD |
| 18020 | 65 73 74 72 6f 79 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 44 65 73 74 72 6f 79 45 6e 76 69 72 6f | estroyAtomTable.RtlDestroyEnviro |
| 18040 | 6e 6d 65 6e 74 00 52 74 6c 44 65 73 74 72 6f 79 48 61 6e 64 6c 65 54 61 62 6c 65 00 52 74 6c 44 | nment.RtlDestroyHandleTable.RtlD |
| 18060 | 65 73 74 72 6f 79 48 65 61 70 00 52 74 6c 44 65 73 74 72 6f 79 50 72 6f 63 65 73 73 50 61 72 61 | estroyHeap.RtlDestroyProcessPara |
| 18080 | 6d 65 74 65 72 73 00 52 74 6c 44 65 73 74 72 6f 79 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 | meters.RtlDestroyQueryDebugBuffe |
| 180a0 | 72 00 52 74 6c 44 65 74 65 72 6d 69 6e 65 44 6f 73 50 61 74 68 4e 61 6d 65 54 79 70 65 5f 55 00 | r.RtlDetermineDosPathNameType_U. |
| 180c0 | 52 74 6c 44 6c 6c 53 68 75 74 64 6f 77 6e 49 6e 50 72 6f 67 72 65 73 73 00 52 74 6c 44 6e 73 48 | RtlDllShutdownInProgress.RtlDnsH |
| 180e0 | 6f 73 74 4e 61 6d 65 54 6f 43 6f 6d 70 75 74 65 72 4e 61 6d 65 00 52 74 6c 44 6f 65 73 46 69 6c | ostNameToComputerName.RtlDoesFil |
| 18100 | 65 45 78 69 73 74 73 5f 55 00 52 74 6c 44 6f 73 41 70 70 6c 79 46 69 6c 65 49 73 6f 6c 61 74 69 | eExists_U.RtlDosApplyFileIsolati |
| 18120 | 6f 6e 52 65 64 69 72 65 63 74 69 6f 6e 5f 55 73 74 72 00 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d | onRedirection_Ustr.RtlDosPathNam |
| 18140 | 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f | eToNtPathName_U.RtlDosPathNameTo |
| 18160 | 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 74 61 74 75 73 00 52 74 6c 44 6f 73 50 61 | NtPathName_U_WithStatus.RtlDosPa |
| 18180 | 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 52 74 6c | thNameToRelativeNtPathName_U.Rtl |
| 181a0 | 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f | DosPathNameToRelativeNtPathName_ |
| 181c0 | 55 5f 57 69 74 68 53 74 61 74 75 73 00 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 00 | U_WithStatus.RtlDosSearchPath_U. |
| 181e0 | 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 73 74 72 00 52 74 6c 44 6f 77 6e 63 61 73 | RtlDosSearchPath_Ustr.RtlDowncas |
| 18200 | 65 55 6e 69 63 6f 64 65 43 68 61 72 00 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 53 | eUnicodeChar.RtlDowncaseUnicodeS |
| 18220 | 74 72 69 6e 67 00 52 74 6c 44 75 6d 70 52 65 73 6f 75 72 63 65 00 52 74 6c 44 75 70 6c 69 63 61 | tring.RtlDumpResource.RtlDuplica |
| 18240 | 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 45 6d 70 74 79 41 74 6f 6d 54 61 62 6c | teUnicodeString.RtlEmptyAtomTabl |
| 18260 | 65 00 52 74 6c 45 6e 61 62 6c 65 45 61 72 6c 79 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 45 | e.RtlEnableEarlyCriticalSectionE |
| 18280 | 76 65 6e 74 43 72 65 61 74 69 6f 6e 00 52 74 6c 45 6e 63 6f 64 65 50 6f 69 6e 74 65 72 00 52 74 | ventCreation.RtlEncodePointer.Rt |
| 182a0 | 6c 45 6e 63 6f 64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 00 52 74 6c 45 6e 74 65 72 43 72 69 | lEncodeSystemPointer.RtlEnterCri |
| 182c0 | 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73 73 48 65 61 70 73 | ticalSection.RtlEnumProcessHeaps |
| 182e0 | 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 00 52 74 6c 45 6e 75 | .RtlEnumerateGenericTable.RtlEnu |
| 18300 | 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 52 74 6c 45 6e 75 6d 65 72 61 | merateGenericTableAvl.RtlEnumera |
| 18320 | 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 4c 69 6b 65 41 44 69 72 65 63 74 6f 72 79 00 52 74 6c | teGenericTableLikeADirectory.Rtl |
| 18340 | 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74 68 6f 75 74 53 70 6c 61 | EnumerateGenericTableWithoutSpla |
| 18360 | 79 69 6e 67 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74 | ying.RtlEnumerateGenericTableWit |
| 18380 | 68 6f 75 74 53 70 6c 61 79 69 6e 67 41 76 6c 00 52 74 6c 45 71 75 61 6c 43 6f 6d 70 75 74 65 72 | houtSplayingAvl.RtlEqualComputer |
| 183a0 | 4e 61 6d 65 00 52 74 6c 45 71 75 61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 00 52 74 6c 45 71 75 61 6c | Name.RtlEqualDomainName.RtlEqual |
| 183c0 | 4c 75 69 64 00 52 74 6c 45 71 75 61 6c 50 72 65 66 69 78 53 69 64 00 52 74 6c 45 71 75 61 6c 53 | Luid.RtlEqualPrefixSid.RtlEqualS |
| 183e0 | 69 64 00 52 74 6c 45 71 75 61 6c 53 74 72 69 6e 67 00 52 74 6c 45 71 75 61 6c 55 6e 69 63 6f 64 | id.RtlEqualString.RtlEqualUnicod |
| 18400 | 65 53 74 72 69 6e 67 00 52 74 6c 45 72 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 | eString.RtlEraseUnicodeString.Rt |
| 18420 | 6c 45 78 69 74 55 73 65 72 54 68 72 65 61 64 00 52 74 6c 45 78 70 61 6e 64 45 6e 76 69 72 6f 6e | lExitUserThread.RtlExpandEnviron |
| 18440 | 6d 65 6e 74 53 74 72 69 6e 67 73 5f 55 00 52 74 6c 45 78 74 65 6e 64 48 65 61 70 00 52 74 6c 46 | mentStrings_U.RtlExtendHeap.RtlF |
| 18460 | 69 6c 6c 4d 65 6d 6f 72 79 00 52 74 6c 46 69 6e 61 6c 52 65 6c 65 61 73 65 4f 75 74 4f 66 50 72 | illMemory.RtlFinalReleaseOutOfPr |
| 18480 | 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 | ocessMemoryStream.RtlFindActivat |
| 184a0 | 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 69 6f 6e 47 75 69 64 00 52 74 6c 46 69 6e 64 41 63 74 | ionContextSectionGuid.RtlFindAct |
| 184c0 | 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 69 6f 6e 53 74 72 69 6e 67 00 52 74 6c 46 | ivationContextSectionString.RtlF |
| 184e0 | 69 6e 64 43 68 61 72 49 6e 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 46 69 6e 64 43 6c | indCharInUnicodeString.RtlFindCl |
| 18500 | 65 61 72 42 69 74 73 00 52 74 6c 46 69 6e 64 43 6c 65 61 72 42 69 74 73 41 6e 64 53 65 74 00 52 | earBits.RtlFindClearBitsAndSet.R |
| 18520 | 74 6c 46 69 6e 64 43 6c 65 61 72 52 75 6e 73 00 52 74 6c 46 69 6e 64 4c 61 73 74 42 61 63 6b 77 | tlFindClearRuns.RtlFindLastBackw |
| 18540 | 61 72 64 52 75 6e 43 6c 65 61 72 00 52 74 6c 46 69 6e 64 4c 65 61 73 74 53 69 67 6e 69 66 69 63 | ardRunClear.RtlFindLeastSignific |
| 18560 | 61 6e 74 42 69 74 00 52 74 6c 46 69 6e 64 4c 6f 6e 67 65 73 74 52 75 6e 43 6c 65 61 72 00 52 74 | antBit.RtlFindLongestRunClear.Rt |
| 18580 | 6c 46 69 6e 64 4d 65 73 73 61 67 65 00 52 74 6c 46 69 6e 64 4d 6f 73 74 53 69 67 6e 69 66 69 63 | lFindMessage.RtlFindMostSignific |
| 185a0 | 61 6e 74 42 69 74 00 52 74 6c 46 69 6e 64 4e 65 78 74 46 6f 72 77 61 72 64 52 75 6e 43 6c 65 61 | antBit.RtlFindNextForwardRunClea |
| 185c0 | 72 00 52 74 6c 46 69 6e 64 53 65 74 42 69 74 73 00 52 74 6c 46 69 6e 64 53 65 74 42 69 74 73 41 | r.RtlFindSetBits.RtlFindSetBitsA |
| 185e0 | 6e 64 43 6c 65 61 72 00 52 74 6c 46 69 72 73 74 45 6e 74 72 79 53 4c 69 73 74 00 52 74 6c 46 69 | ndClear.RtlFirstEntrySList.RtlFi |
| 18600 | 72 73 74 46 72 65 65 41 63 65 00 52 74 6c 46 6c 75 73 68 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 | rstFreeAce.RtlFlushSecureMemoryC |
| 18620 | 61 63 68 65 00 52 74 6c 46 6f 72 6d 61 74 43 75 72 72 65 6e 74 55 73 65 72 4b 65 79 50 61 74 68 | ache.RtlFormatCurrentUserKeyPath |
| 18640 | 00 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 00 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 | .RtlFormatMessage.RtlFormatMessa |
| 18660 | 67 65 45 78 00 52 74 6c 46 72 65 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 | geEx.RtlFreeActivationContextSta |
| 18680 | 63 6b 00 52 74 6c 46 72 65 65 41 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 46 72 65 65 48 61 6e 64 | ck.RtlFreeAnsiString.RtlFreeHand |
| 186a0 | 6c 65 00 52 74 6c 46 72 65 65 48 65 61 70 00 52 74 6c 46 72 65 65 4f 65 6d 53 74 72 69 6e 67 00 | le.RtlFreeHeap.RtlFreeOemString. |
| 186c0 | 52 74 6c 46 72 65 65 53 69 64 00 52 74 6c 46 72 65 65 54 68 72 65 61 64 41 63 74 69 76 61 74 69 | RtlFreeSid.RtlFreeThreadActivati |
| 186e0 | 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 52 74 6c 46 72 65 65 55 6e 69 63 6f 64 65 53 74 72 | onContextStack.RtlFreeUnicodeStr |
| 18700 | 69 6e 67 00 52 74 6c 46 72 65 65 55 73 65 72 54 68 72 65 61 64 53 74 61 63 6b 00 52 74 6c 47 55 | ing.RtlFreeUserThreadStack.RtlGU |
| 18720 | 49 44 46 72 6f 6d 53 74 72 69 6e 67 00 52 74 6c 47 65 6e 65 72 61 74 65 38 64 6f 74 33 4e 61 6d | IDFromString.RtlGenerate8dot3Nam |
| 18740 | 65 00 52 74 6c 47 65 74 41 63 65 00 52 74 6c 47 65 74 41 63 74 69 76 65 41 63 74 69 76 61 74 69 | e.RtlGetAce.RtlGetActiveActivati |
| 18760 | 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 47 65 74 43 61 6c 6c 65 72 73 41 64 64 72 65 73 73 00 52 | onContext.RtlGetCallersAddress.R |
| 18780 | 74 6c 47 65 74 43 6f 6d 70 72 65 73 73 69 6f 6e 57 6f 72 6b 53 70 61 63 65 53 69 7a 65 00 52 74 | tlGetCompressionWorkSpaceSize.Rt |
| 187a0 | 6c 47 65 74 43 6f 6e 74 72 6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 | lGetControlSecurityDescriptor.Rt |
| 187c0 | 6c 47 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 52 65 63 75 72 73 69 6f 6e 43 6f 75 6e | lGetCriticalSectionRecursionCoun |
| 187e0 | 74 00 52 74 6c 47 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 5f 55 00 52 74 6c 47 65 | t.RtlGetCurrentDirectory_U.RtlGe |
| 18800 | 74 43 75 72 72 65 6e 74 50 65 62 00 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 | tCurrentPeb.RtlGetCurrentProcess |
| 18820 | 6f 72 4e 75 6d 62 65 72 00 52 74 6c 47 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 | orNumber.RtlGetDaclSecurityDescr |
| 18840 | 69 70 74 6f 72 00 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 | iptor.RtlGetElementGenericTable. |
| 18860 | 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 52 74 6c | RtlGetElementGenericTableAvl.Rtl |
| 18880 | 47 65 74 46 72 61 6d 65 00 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 00 52 74 | GetFrame.RtlGetFullPathName_U.Rt |
| 188a0 | 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 73 74 72 45 78 00 52 74 6c 47 65 74 46 75 | lGetFullPathName_UstrEx.RtlGetFu |
| 188c0 | 6e 63 74 69 6f 6e 54 61 62 6c 65 4c 69 73 74 48 65 61 64 00 52 74 6c 47 65 74 47 72 6f 75 70 53 | nctionTableListHead.RtlGetGroupS |
| 188e0 | 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 47 65 74 4c 61 73 74 4e 74 53 74 | ecurityDescriptor.RtlGetLastNtSt |
| 18900 | 61 74 75 73 00 52 74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 52 74 6c 47 65 74 | atus.RtlGetLastWin32Error.RtlGet |
| 18920 | 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 4c 61 73 74 46 75 6c 6c 44 6f 73 4f 72 4e 74 50 61 74 68 | LengthWithoutLastFullDosOrNtPath |
| 18940 | 45 6c 65 6d 65 6e 74 00 52 74 6c 47 65 74 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 54 72 61 69 6c | Element.RtlGetLengthWithoutTrail |
| 18960 | 69 6e 67 50 61 74 68 53 65 70 65 72 61 74 6f 72 73 00 52 74 6c 47 65 74 4c 6f 6e 67 65 73 74 4e | ingPathSeperators.RtlGetLongestN |
| 18980 | 74 50 61 74 68 4c 65 6e 67 74 68 00 52 74 6c 47 65 74 4e 61 74 69 76 65 53 79 73 74 65 6d 49 6e | tPathLength.RtlGetNativeSystemIn |
| 189a0 | 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 47 65 74 4e 74 47 6c 6f 62 61 6c 46 6c 61 67 73 00 52 74 | formation.RtlGetNtGlobalFlags.Rt |
| 189c0 | 6c 47 65 74 4e 74 50 72 6f 64 75 63 74 54 79 70 65 00 52 74 6c 47 65 74 4e 74 56 65 72 73 69 6f | lGetNtProductType.RtlGetNtVersio |
| 189e0 | 6e 4e 75 6d 62 65 72 73 00 52 74 6c 47 65 74 4f 77 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 63 | nNumbers.RtlGetOwnerSecurityDesc |
| 18a00 | 72 69 70 74 6f 72 00 52 74 6c 47 65 74 50 72 6f 63 65 73 73 48 65 61 70 73 00 52 74 6c 47 65 74 | riptor.RtlGetProcessHeaps.RtlGet |
| 18a20 | 53 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 47 65 74 53 65 63 | SaclSecurityDescriptor.RtlGetSec |
| 18a40 | 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 52 74 6c 47 65 74 53 | urityDescriptorRMControl.RtlGetS |
| 18a60 | 65 74 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 52 74 6c 47 65 74 54 68 72 65 61 64 45 72 72 | etBootStatusData.RtlGetThreadErr |
| 18a80 | 6f 72 4d 6f 64 65 00 52 74 6c 47 65 74 55 6e 6c 6f 61 64 45 76 65 6e 74 54 72 61 63 65 00 52 74 | orMode.RtlGetUnloadEventTrace.Rt |
| 18aa0 | 6c 47 65 74 55 73 65 72 49 6e 66 6f 48 65 61 70 00 52 74 6c 47 65 74 56 65 72 73 69 6f 6e 00 52 | lGetUserInfoHeap.RtlGetVersion.R |
| 18ac0 | 74 6c 48 61 73 68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 49 64 65 6e 74 69 66 69 65 | tlHashUnicodeString.RtlIdentifie |
| 18ae0 | 72 41 75 74 68 6f 72 69 74 79 53 69 64 00 52 74 6c 49 6d 61 67 65 44 69 72 65 63 74 6f 72 79 45 | rAuthoritySid.RtlImageDirectoryE |
| 18b00 | 6e 74 72 79 54 6f 44 61 74 61 00 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 00 52 74 6c 49 | ntryToData.RtlImageNtHeader.RtlI |
| 18b20 | 6d 61 67 65 4e 74 48 65 61 64 65 72 45 78 00 52 74 6c 49 6d 61 67 65 52 76 61 54 6f 53 65 63 74 | mageNtHeaderEx.RtlImageRvaToSect |
| 18b40 | 69 6f 6e 00 52 74 6c 49 6d 61 67 65 52 76 61 54 6f 56 61 00 52 74 6c 49 6d 70 65 72 73 6f 6e 61 | ion.RtlImageRvaToVa.RtlImpersona |
| 18b60 | 74 65 53 65 6c 66 00 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 49 6e 69 74 | teSelf.RtlInitAnsiString.RtlInit |
| 18b80 | 41 6e 73 69 53 74 72 69 6e 67 45 78 00 52 74 6c 49 6e 69 74 43 6f 64 65 50 61 67 65 54 61 62 6c | AnsiStringEx.RtlInitCodePageTabl |
| 18ba0 | 65 00 52 74 6c 49 6e 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 49 6e 69 74 4e 6c 73 | e.RtlInitMemoryStream.RtlInitNls |
| 18bc0 | 54 61 62 6c 65 73 00 52 74 6c 49 6e 69 74 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 | Tables.RtlInitOutOfProcessMemory |
| 18be0 | 53 74 72 65 61 6d 00 52 74 6c 49 6e 69 74 53 74 72 69 6e 67 00 52 74 6c 49 6e 69 74 55 6e 69 63 | Stream.RtlInitString.RtlInitUnic |
| 18c00 | 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 45 78 | odeString.RtlInitUnicodeStringEx |
| 18c20 | 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 41 74 6f 6d 50 61 63 6b 61 67 65 00 52 74 6c 49 6e 69 | .RtlInitializeAtomPackage.RtlIni |
| 18c40 | 74 69 61 6c 69 7a 65 42 69 74 4d 61 70 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 6f 6e 74 65 | tializeBitMap.RtlInitializeConte |
| 18c60 | 78 74 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 | xt.RtlInitializeCriticalSection. |
| 18c80 | 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 41 6e 64 53 | RtlInitializeCriticalSectionAndS |
| 18ca0 | 70 69 6e 43 6f 75 6e 74 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62 | pinCount.RtlInitializeGenericTab |
| 18cc0 | 6c 65 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 | le.RtlInitializeGenericTableAvl. |
| 18ce0 | 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61 6e 64 6c 65 54 61 62 6c 65 00 52 74 6c 49 6e 69 74 | RtlInitializeHandleTable.RtlInit |
| 18d00 | 69 61 6c 69 7a 65 52 58 61 63 74 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 65 73 6f 75 72 63 | ializeRXact.RtlInitializeResourc |
| 18d20 | 65 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 4c 69 73 74 48 65 61 64 00 52 74 6c 49 6e 69 74 | e.RtlInitializeSListHead.RtlInit |
| 18d40 | 69 61 6c 69 7a 65 53 69 64 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 | ializeSid.RtlInsertElementGeneri |
| 18d60 | 63 54 61 62 6c 65 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 | cTable.RtlInsertElementGenericTa |
| 18d80 | 62 6c 65 41 76 6c 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 | bleAvl.RtlInsertElementGenericTa |
| 18da0 | 62 6c 65 46 75 6c 6c 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 | bleFull.RtlInsertElementGenericT |
| 18dc0 | 61 62 6c 65 46 75 6c 6c 41 76 6c 00 52 74 6c 49 6e 73 74 61 6c 6c 46 75 6e 63 74 69 6f 6e 54 61 | ableFullAvl.RtlInstallFunctionTa |
| 18de0 | 62 6c 65 43 61 6c 6c 62 61 63 6b 00 52 74 6c 49 6e 74 36 34 54 6f 55 6e 69 63 6f 64 65 53 74 72 | bleCallback.RtlInt64ToUnicodeStr |
| 18e00 | 69 6e 67 00 52 74 6c 49 6e 74 65 67 65 72 54 6f 43 68 61 72 00 52 74 6c 49 6e 74 65 67 65 72 54 | ing.RtlIntegerToChar.RtlIntegerT |
| 18e20 | 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 46 6c 75 | oUnicodeString.RtlInterlockedFlu |
| 18e40 | 73 68 53 4c 69 73 74 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 6f 70 45 6e 74 72 79 53 4c | shSList.RtlInterlockedPopEntrySL |
| 18e60 | 69 73 74 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 75 73 68 45 6e 74 72 79 53 4c 69 73 74 | ist.RtlInterlockedPushEntrySList |
| 18e80 | 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 75 73 68 4c 69 73 74 53 4c 69 73 74 00 52 74 6c | .RtlInterlockedPushListSList.Rtl |
| 18ea0 | 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 52 74 6c 49 70 76 34 41 64 64 72 | Ipv4AddressToStringA.RtlIpv4Addr |
| 18ec0 | 65 73 73 54 6f 53 74 72 69 6e 67 45 78 41 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 | essToStringExA.RtlIpv4AddressToS |
| 18ee0 | 74 72 69 6e 67 45 78 57 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 57 | tringExW.RtlIpv4AddressToStringW |
| 18f00 | 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 41 00 52 74 6c 49 70 76 34 | .RtlIpv4StringToAddressA.RtlIpv4 |
| 18f20 | 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 41 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 | StringToAddressExA.RtlIpv4String |
| 18f40 | 54 6f 41 64 64 72 65 73 73 45 78 57 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 | ToAddressExW.RtlIpv4StringToAddr |
| 18f60 | 65 73 73 57 00 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 52 74 6c | essW.RtlIpv6AddressToStringA.Rtl |
| 18f80 | 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 41 00 52 74 6c 49 70 76 36 41 64 | Ipv6AddressToStringExA.RtlIpv6Ad |
| 18fa0 | 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 00 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 | dressToStringExW.RtlIpv6AddressT |
| 18fc0 | 6f 53 74 72 69 6e 67 57 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 41 | oStringW.RtlIpv6StringToAddressA |
| 18fe0 | 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 41 00 52 74 6c 49 70 | .RtlIpv6StringToAddressExA.RtlIp |
| 19000 | 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 00 52 74 6c 49 70 76 36 53 74 72 69 | v6StringToAddressExW.RtlIpv6Stri |
| 19020 | 6e 67 54 6f 41 64 64 72 65 73 73 57 00 52 74 6c 49 73 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 | ngToAddressW.RtlIsActivationCont |
| 19040 | 65 78 74 41 63 74 69 76 65 00 52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f | extActive.RtlIsCriticalSectionLo |
| 19060 | 63 6b 65 64 00 52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 42 | cked.RtlIsCriticalSectionLockedB |
| 19080 | 79 54 68 72 65 61 64 00 52 74 6c 49 73 44 6f 73 44 65 76 69 63 65 4e 61 6d 65 5f 55 00 52 74 6c | yThread.RtlIsDosDeviceName_U.Rtl |
| 190a0 | 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74 79 00 52 74 6c 49 73 47 65 6e 65 72 69 63 | IsGenericTableEmpty.RtlIsGeneric |
| 190c0 | 54 61 62 6c 65 45 6d 70 74 79 41 76 6c 00 52 74 6c 49 73 4e 61 6d 65 4c 65 67 61 6c 44 4f 53 38 | TableEmptyAvl.RtlIsNameLegalDOS8 |
| 190e0 | 44 6f 74 33 00 52 74 6c 49 73 54 65 78 74 55 6e 69 63 6f 64 65 00 52 74 6c 49 73 54 68 72 65 61 | Dot3.RtlIsTextUnicode.RtlIsThrea |
| 19100 | 64 57 69 74 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c 6f 75 74 00 52 74 6c 49 73 56 61 6c 69 64 48 | dWithinLoaderCallout.RtlIsValidH |
| 19120 | 61 6e 64 6c 65 00 52 74 6c 49 73 56 61 6c 69 64 49 6e 64 65 78 48 61 6e 64 6c 65 00 52 74 6c 4c | andle.RtlIsValidIndexHandle.RtlL |
| 19140 | 61 72 67 65 49 6e 74 65 67 65 72 54 6f 43 68 61 72 00 52 74 6c 4c 65 61 76 65 43 72 69 74 69 63 | argeIntegerToChar.RtlLeaveCritic |
| 19160 | 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 4c 65 6e 67 74 68 52 65 71 75 69 72 65 64 53 69 64 00 52 | alSection.RtlLengthRequiredSid.R |
| 19180 | 74 6c 4c 65 6e 67 74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 4c 65 | tlLengthSecurityDescriptor.RtlLe |
| 191a0 | 6e 67 74 68 53 69 64 00 52 74 6c 4c 6f 63 61 6c 54 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 | ngthSid.RtlLocalTimeToSystemTime |
| 191c0 | 00 52 74 6c 4c 6f 63 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 52 74 6c 4c 6f 63 6b 48 65 | .RtlLockBootStatusData.RtlLockHe |
| 191e0 | 61 70 00 52 74 6c 4c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e 00 52 74 6c | ap.RtlLockMemoryStreamRegion.Rtl |
| 19200 | 4c 6f 67 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 52 74 6c 4c 6f 6f 6b 75 70 41 74 6f 6d 49 | LogStackBackTrace.RtlLookupAtomI |
| 19220 | 6e 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 | nAtomTable.RtlLookupElementGener |
| 19240 | 69 63 54 61 62 6c 65 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 | icTable.RtlLookupElementGenericT |
| 19260 | 61 62 6c 65 41 76 6c 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 | ableAvl.RtlLookupElementGenericT |
| 19280 | 61 62 6c 65 46 75 6c 6c 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 | ableFull.RtlLookupElementGeneric |
| 192a0 | 54 61 62 6c 65 46 75 6c 6c 41 76 6c 00 52 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 45 6e | TableFullAvl.RtlLookupFunctionEn |
| 192c0 | 74 72 79 00 52 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 52 74 6c 4d 61 | try.RtlLookupFunctionTable.RtlMa |
| 192e0 | 6b 65 53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 00 52 74 6c 4d 61 70 47 65 6e 65 72 69 63 4d 61 | keSelfRelativeSD.RtlMapGenericMa |
| 19300 | 73 6b 00 52 74 6c 4d 61 70 53 65 63 75 72 69 74 79 45 72 72 6f 72 54 6f 4e 74 53 74 61 74 75 73 | sk.RtlMapSecurityErrorToNtStatus |
| 19320 | 00 52 74 6c 4d 6f 76 65 4d 65 6d 6f 72 79 00 52 74 6c 4d 75 6c 74 69 41 70 70 65 6e 64 55 6e 69 | .RtlMoveMemory.RtlMultiAppendUni |
| 19340 | 63 6f 64 65 53 74 72 69 6e 67 42 75 66 66 65 72 00 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 | codeStringBuffer.RtlMultiByteToU |
| 19360 | 6e 69 63 6f 64 65 4e 00 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 53 69 7a | nicodeN.RtlMultiByteToUnicodeSiz |
| 19380 | 65 00 52 74 6c 4d 75 6c 74 69 70 6c 65 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 52 74 6c 4d 75 6c | e.RtlMultipleAllocateHeap.RtlMul |
| 193a0 | 74 69 70 6c 65 46 72 65 65 48 65 61 70 00 52 74 6c 4e 65 77 49 6e 73 74 61 6e 63 65 53 65 63 75 | tipleFreeHeap.RtlNewInstanceSecu |
| 193c0 | 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 47 72 61 6e 74 65 64 | rityObject.RtlNewSecurityGranted |
| 193e0 | 41 63 63 65 73 73 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 4e | Access.RtlNewSecurityObject.RtlN |
| 19400 | 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 45 78 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 | ewSecurityObjectEx.RtlNewSecurit |
| 19420 | 79 4f 62 6a 65 63 74 57 69 74 68 4d 75 6c 74 69 70 6c 65 49 6e 68 65 72 69 74 61 6e 63 65 00 52 | yObjectWithMultipleInheritance.R |
| 19440 | 74 6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 52 74 6c 4e 74 50 61 | tlNormalizeProcessParams.RtlNtPa |
| 19460 | 74 68 4e 61 6d 65 54 6f 44 6f 73 50 61 74 68 4e 61 6d 65 00 52 74 6c 4e 74 53 74 61 74 75 73 54 | thNameToDosPathName.RtlNtStatusT |
| 19480 | 6f 44 6f 73 45 72 72 6f 72 00 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 72 6f 72 4e | oDosError.RtlNtStatusToDosErrorN |
| 194a0 | 6f 54 65 62 00 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6c 65 6d 65 6e | oTeb.RtlNumberGenericTableElemen |
| 194c0 | 74 73 00 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 | ts.RtlNumberGenericTableElements |
| 194e0 | 41 76 6c 00 52 74 6c 4e 75 6d 62 65 72 4f 66 43 6c 65 61 72 42 69 74 73 00 52 74 6c 4e 75 6d 62 | Avl.RtlNumberOfClearBits.RtlNumb |
| 19500 | 65 72 4f 66 53 65 74 42 69 74 73 00 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 | erOfSetBits.RtlOemStringToUnicod |
| 19520 | 65 53 69 7a 65 00 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e | eSize.RtlOemStringToUnicodeStrin |
| 19540 | 67 00 52 74 6c 4f 65 6d 54 6f 55 6e 69 63 6f 64 65 4e 00 52 74 6c 4f 70 65 6e 43 75 72 72 65 6e | g.RtlOemToUnicodeN.RtlOpenCurren |
| 19560 | 74 55 73 65 72 00 52 74 6c 50 63 54 6f 46 69 6c 65 48 65 61 64 65 72 00 52 74 6c 50 69 6e 41 74 | tUser.RtlPcToFileHeader.RtlPinAt |
| 19580 | 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 50 6f 70 46 72 61 6d 65 00 52 74 6c 50 72 65 | omInAtomTable.RtlPopFrame.RtlPre |
| 195a0 | 66 69 78 53 74 72 69 6e 67 00 52 74 6c 50 72 65 66 69 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | fixString.RtlPrefixUnicodeString |
| 195c0 | 00 52 74 6c 50 72 6f 74 65 63 74 48 65 61 70 00 52 74 6c 50 75 73 68 46 72 61 6d 65 00 52 74 6c | .RtlProtectHeap.RtlPushFrame.Rtl |
| 195e0 | 51 75 65 72 79 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 52 74 6c 51 75 65 72 79 44 65 70 | QueryAtomInAtomTable.RtlQueryDep |
| 19600 | 74 68 53 4c 69 73 74 00 52 74 6c 51 75 65 72 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 | thSList.RtlQueryEnvironmentVaria |
| 19620 | 62 6c 65 5f 55 00 52 74 6c 51 75 65 72 79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 | ble_U.RtlQueryHeapInformation.Rt |
| 19640 | 6c 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 00 52 74 6c 51 75 65 72 79 49 6e 66 | lQueryInformationAcl.RtlQueryInf |
| 19660 | 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 51 75 65 | ormationActivationContext.RtlQue |
| 19680 | 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e | ryInformationActiveActivationCon |
| 196a0 | 74 65 78 74 00 52 74 6c 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 4d 65 6d 6f 72 79 53 74 72 65 | text.RtlQueryInterfaceMemoryStre |
| 196c0 | 61 6d 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 42 61 63 6b 54 72 61 63 65 49 6e 66 6f 72 | am.RtlQueryProcessBackTraceInfor |
| 196e0 | 6d 61 74 69 6f 6e 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 44 65 62 75 67 49 6e 66 6f 72 | mation.RtlQueryProcessDebugInfor |
| 19700 | 6d 61 74 69 6f 6e 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 48 65 61 70 49 6e 66 6f 72 6d | mation.RtlQueryProcessHeapInform |
| 19720 | 61 74 69 6f 6e 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 4c 6f 63 6b 49 6e 66 6f 72 6d 61 | ation.RtlQueryProcessLockInforma |
| 19740 | 74 69 6f 6e 00 52 74 6c 51 75 65 72 79 52 65 67 69 73 74 72 79 56 61 6c 75 65 73 00 52 74 6c 51 | tion.RtlQueryRegistryValues.RtlQ |
| 19760 | 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 52 74 6c 51 75 65 72 79 54 61 67 48 65 | uerySecurityObject.RtlQueryTagHe |
| 19780 | 61 70 00 52 74 6c 51 75 65 72 79 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 | ap.RtlQueryTimeZoneInformation.R |
| 197a0 | 74 6c 51 75 65 75 65 41 70 63 57 6f 77 36 34 54 68 72 65 61 64 00 52 74 6c 51 75 65 75 65 57 6f | tlQueueApcWow64Thread.RtlQueueWo |
| 197c0 | 72 6b 49 74 65 6d 00 52 74 6c 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 52 74 6c 52 61 69 73 | rkItem.RtlRaiseException.RtlRais |
| 197e0 | 65 53 74 61 74 75 73 00 52 74 6c 52 61 6e 64 6f 6d 00 52 74 6c 52 61 6e 64 6f 6d 45 78 00 52 74 | eStatus.RtlRandom.RtlRandomEx.Rt |
| 19800 | 6c 52 65 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 52 74 6c 52 65 61 64 4d 65 6d 6f 72 79 53 74 72 | lReAllocateHeap.RtlReadMemoryStr |
| 19820 | 65 61 6d 00 52 74 6c 52 65 61 64 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 | eam.RtlReadOutOfProcessMemoryStr |
| 19840 | 65 61 6d 00 52 74 6c 52 65 61 6c 50 72 65 64 65 63 65 73 73 6f 72 00 52 74 6c 52 65 61 6c 53 75 | eam.RtlRealPredecessor.RtlRealSu |
| 19860 | 63 63 65 73 73 6f 72 00 52 74 6c 52 65 67 69 73 74 65 72 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 | ccessor.RtlRegisterSecureMemoryC |
| 19880 | 61 63 68 65 43 61 6c 6c 62 61 63 6b 00 52 74 6c 52 65 67 69 73 74 65 72 57 61 69 74 00 52 74 6c | acheCallback.RtlRegisterWait.Rtl |
| 198a0 | 52 65 6c 65 61 73 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 52 65 6c 65 | ReleaseActivationContext.RtlRele |
| 198c0 | 61 73 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 52 65 6c 65 61 73 65 50 65 62 4c 6f 63 | aseMemoryStream.RtlReleasePebLoc |
| 198e0 | 6b 00 52 74 6c 52 65 6c 65 61 73 65 50 72 69 76 69 6c 65 67 65 00 52 74 6c 52 65 6c 65 61 73 65 | k.RtlReleasePrivilege.RtlRelease |
| 19900 | 52 65 6c 61 74 69 76 65 4e 61 6d 65 00 52 74 6c 52 65 6c 65 61 73 65 52 65 73 6f 75 72 63 65 00 | RelativeName.RtlReleaseResource. |
| 19920 | 52 74 6c 52 65 6d 6f 74 65 43 61 6c 6c 00 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 43 | RtlRemoteCall.RtlRemoveVectoredC |
| 19940 | 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 00 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 | ontinueHandler.RtlRemoveVectored |
| 19960 | 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 52 74 6c 52 65 73 65 74 52 74 6c 54 72 61 6e | ExceptionHandler.RtlResetRtlTran |
| 19980 | 73 6c 61 74 69 6f 6e 73 00 52 74 6c 52 65 73 74 6f 72 65 43 6f 6e 74 65 78 74 00 52 74 6c 52 65 | slations.RtlRestoreContext.RtlRe |
| 199a0 | 73 74 6f 72 65 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 52 74 6c 52 65 76 65 72 74 4d 65 6d | storeLastWin32Error.RtlRevertMem |
| 199c0 | 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 52 75 6e 44 65 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 | oryStream.RtlRunDecodeUnicodeStr |
| 199e0 | 69 6e 67 00 52 74 6c 52 75 6e 45 6e 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 | ing.RtlRunEncodeUnicodeString.Rt |
| 19a00 | 6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 54 6f 54 69 6d 65 00 52 74 6c 53 65 63 6f 6e | lSecondsSince1970ToTime.RtlSecon |
| 19a20 | 64 73 53 69 6e 63 65 31 39 38 30 54 6f 54 69 6d 65 00 52 74 6c 53 65 65 6b 4d 65 6d 6f 72 79 53 | dsSince1980ToTime.RtlSeekMemoryS |
| 19a40 | 74 72 65 61 6d 00 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 | tream.RtlSelfRelativeToAbsoluteS |
| 19a60 | 44 00 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 32 00 52 | D.RtlSelfRelativeToAbsoluteSD2.R |
| 19a80 | 74 6c 53 65 74 41 6c 6c 42 69 74 73 00 52 74 6c 53 65 74 41 74 74 72 69 62 75 74 65 73 53 65 63 | tlSetAllBits.RtlSetAttributesSec |
| 19aa0 | 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 42 69 74 73 00 52 74 6c 53 65 | urityDescriptor.RtlSetBits.RtlSe |
| 19ac0 | 74 43 6f 6e 74 72 6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 | tControlSecurityDescriptor.RtlSe |
| 19ae0 | 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 53 70 69 6e 43 6f 75 6e 74 00 52 74 6c 53 65 74 | tCriticalSectionSpinCount.RtlSet |
| 19b00 | 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 5f 55 00 52 74 6c 53 65 74 43 75 72 72 65 6e 74 | CurrentDirectory_U.RtlSetCurrent |
| 19b20 | 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 52 74 6c 53 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 | Environment.RtlSetDaclSecurityDe |
| 19b40 | 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 | scriptor.RtlSetEnvironmentString |
| 19b60 | 73 00 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 00 52 74 6c 53 | s.RtlSetEnvironmentVariable.RtlS |
| 19b80 | 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 | etGroupSecurityDescriptor.RtlSet |
| 19ba0 | 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f | HeapInformation.RtlSetInformatio |
| 19bc0 | 6e 41 63 6c 00 52 74 6c 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 00 | nAcl.RtlSetIoCompletionCallback. |
| 19be0 | 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 52 74 6c 53 65 74 4c 61 73 74 57 | RtlSetLastWin32Error.RtlSetLastW |
| 19c00 | 69 6e 33 32 45 72 72 6f 72 41 6e 64 4e 74 53 74 61 74 75 73 46 72 6f 6d 4e 74 53 74 61 74 75 73 | in32ErrorAndNtStatusFromNtStatus |
| 19c20 | 00 52 74 6c 53 65 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 53 69 7a 65 00 52 74 6c 53 65 74 4f 77 | .RtlSetMemoryStreamSize.RtlSetOw |
| 19c40 | 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 50 72 6f 63 | nerSecurityDescriptor.RtlSetProc |
| 19c60 | 65 73 73 49 73 43 72 69 74 69 63 61 6c 00 52 74 6c 53 65 74 53 61 63 6c 53 65 63 75 72 69 74 79 | essIsCritical.RtlSetSaclSecurity |
| 19c80 | 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 | Descriptor.RtlSetSecurityDescrip |
| 19ca0 | 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 | torRMControl.RtlSetSecurityObjec |
| 19cc0 | 74 00 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 45 78 00 52 74 6c 53 65 74 54 | t.RtlSetSecurityObjectEx.RtlSetT |
| 19ce0 | 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 00 52 74 6c 53 65 74 54 68 72 65 61 64 49 73 43 72 69 | hreadErrorMode.RtlSetThreadIsCri |
| 19d00 | 74 69 63 61 6c 00 52 74 6c 53 65 74 54 68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74 46 75 6e 63 00 | tical.RtlSetThreadPoolStartFunc. |
| 19d20 | 52 74 6c 53 65 74 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 52 74 6c 53 65 74 | RtlSetTimeZoneInformation.RtlSet |
| 19d40 | 54 69 6d 65 72 00 52 74 6c 53 65 74 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 | Timer.RtlSetUnhandledExceptionFi |
| 19d60 | 6c 74 65 72 00 52 74 6c 53 65 74 55 6e 69 63 6f 64 65 43 61 6c 6c 6f 75 74 73 00 52 74 6c 53 65 | lter.RtlSetUnicodeCallouts.RtlSe |
| 19d80 | 74 55 73 65 72 46 6c 61 67 73 48 65 61 70 00 52 74 6c 53 65 74 55 73 65 72 56 61 6c 75 65 48 65 | tUserFlagsHeap.RtlSetUserValueHe |
| 19da0 | 61 70 00 52 74 6c 53 69 7a 65 48 65 61 70 00 52 74 6c 53 70 6c 61 79 00 52 74 6c 53 74 61 72 74 | ap.RtlSizeHeap.RtlSplay.RtlStart |
| 19dc0 | 52 58 61 63 74 00 52 74 6c 53 74 61 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 53 74 72 | RXact.RtlStatMemoryStream.RtlStr |
| 19de0 | 69 6e 67 46 72 6f 6d 47 55 49 44 00 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79 43 6f 75 6e 74 | ingFromGUID.RtlSubAuthorityCount |
| 19e00 | 53 69 64 00 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79 53 69 64 00 52 74 6c 53 75 62 74 72 65 | Sid.RtlSubAuthoritySid.RtlSubtre |
| 19e20 | 65 50 72 65 64 65 63 65 73 73 6f 72 00 52 74 6c 53 75 62 74 72 65 65 53 75 63 63 65 73 73 6f 72 | ePredecessor.RtlSubtreeSuccessor |
| 19e40 | 00 52 74 6c 53 79 73 74 65 6d 54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69 6d 65 00 52 74 6c 54 69 6d | .RtlSystemTimeToLocalTime.RtlTim |
| 19e60 | 65 46 69 65 6c 64 73 54 6f 54 69 6d 65 00 52 74 6c 54 69 6d 65 54 6f 45 6c 61 70 73 65 64 54 69 | eFieldsToTime.RtlTimeToElapsedTi |
| 19e80 | 6d 65 46 69 65 6c 64 73 00 52 74 6c 54 69 6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 | meFields.RtlTimeToSecondsSince19 |
| 19ea0 | 37 30 00 52 74 6c 54 69 6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 00 52 74 6c | 70.RtlTimeToSecondsSince1980.Rtl |
| 19ec0 | 54 69 6d 65 54 6f 54 69 6d 65 46 69 65 6c 64 73 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 | TimeToTimeFields.RtlTraceDatabas |
| 19ee0 | 65 41 64 64 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 43 72 65 61 74 65 00 52 74 6c 54 | eAdd.RtlTraceDatabaseCreate.RtlT |
| 19f00 | 72 61 63 65 44 61 74 61 62 61 73 65 44 65 73 74 72 6f 79 00 52 74 6c 54 72 61 63 65 44 61 74 61 | raceDatabaseDestroy.RtlTraceData |
| 19f20 | 62 61 73 65 45 6e 75 6d 65 72 61 74 65 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 46 69 | baseEnumerate.RtlTraceDatabaseFi |
| 19f40 | 6e 64 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 4c 6f 63 6b 00 52 74 6c 54 72 61 63 65 | nd.RtlTraceDatabaseLock.RtlTrace |
| 19f60 | 44 61 74 61 62 61 73 65 55 6e 6c 6f 63 6b 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 56 | DatabaseUnlock.RtlTraceDatabaseV |
| 19f80 | 61 6c 69 64 61 74 65 00 52 74 6c 54 72 79 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 | alidate.RtlTryEnterCriticalSecti |
| 19fa0 | 6f 6e 00 52 74 6c 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 52 | on.RtlUnhandledExceptionFilter.R |
| 19fc0 | 74 6c 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 32 00 52 74 6c 55 | tlUnhandledExceptionFilter2.RtlU |
| 19fe0 | 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 00 52 74 6c 55 6e 69 63 6f 64 | nicodeStringToAnsiSize.RtlUnicod |
| 1a000 | 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 | eStringToAnsiString.RtlUnicodeSt |
| 1a020 | 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 52 74 6c 55 6e 69 63 6f 64 | ringToCountedOemString.RtlUnicod |
| 1a040 | 65 53 74 72 69 6e 67 54 6f 49 6e 74 65 67 65 72 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e | eStringToInteger.RtlUnicodeStrin |
| 1a060 | 67 54 6f 4f 65 6d 53 69 7a 65 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d | gToOemSize.RtlUnicodeStringToOem |
| 1a080 | 53 74 72 69 6e 67 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 43 75 73 74 6f 6d 43 50 4e 00 52 74 6c | String.RtlUnicodeToCustomCPN.Rtl |
| 1a0a0 | 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 4e 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f | UnicodeToMultiByteN.RtlUnicodeTo |
| 1a0c0 | 4d 75 6c 74 69 42 79 74 65 53 69 7a 65 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e 00 52 | MultiByteSize.RtlUnicodeToOemN.R |
| 1a0e0 | 74 6c 55 6e 69 66 6f 72 6d 00 52 74 6c 55 6e 6c 6f 63 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74 | tlUniform.RtlUnlockBootStatusDat |
| 1a100 | 61 00 52 74 6c 55 6e 6c 6f 63 6b 48 65 61 70 00 52 74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f 72 79 53 | a.RtlUnlockHeap.RtlUnlockMemoryS |
| 1a120 | 74 72 65 61 6d 52 65 67 69 6f 6e 00 52 74 6c 55 6e 77 69 6e 64 00 52 74 6c 55 6e 77 69 6e 64 45 | treamRegion.RtlUnwind.RtlUnwindE |
| 1a140 | 78 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61 72 00 52 74 6c 55 70 63 61 73 65 | x.RtlUpcaseUnicodeChar.RtlUpcase |
| 1a160 | 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 | UnicodeString.RtlUpcaseUnicodeSt |
| 1a180 | 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e 67 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 | ringToAnsiString.RtlUpcaseUnicod |
| 1a1a0 | 65 53 74 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 52 74 6c 55 70 63 | eStringToCountedOemString.RtlUpc |
| 1a1c0 | 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 00 52 74 6c 55 | aseUnicodeStringToOemString.RtlU |
| 1a1e0 | 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 43 75 73 74 6f 6d 43 50 4e 00 52 74 6c 55 70 63 61 73 | pcaseUnicodeToCustomCPN.RtlUpcas |
| 1a200 | 65 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 4e 00 52 74 6c 55 70 63 61 73 65 55 6e | eUnicodeToMultiByteN.RtlUpcaseUn |
| 1a220 | 69 63 6f 64 65 54 6f 4f 65 6d 4e 00 52 74 6c 55 70 64 61 74 65 54 69 6d 65 72 00 52 74 6c 55 70 | icodeToOemN.RtlUpdateTimer.RtlUp |
| 1a240 | 70 65 72 43 68 61 72 00 52 74 6c 55 70 70 65 72 53 74 72 69 6e 67 00 52 74 6c 55 73 61 67 65 48 | perChar.RtlUpperString.RtlUsageH |
| 1a260 | 65 61 70 00 52 74 6c 56 61 6c 69 64 41 63 6c 00 52 74 6c 56 61 6c 69 64 52 65 6c 61 74 69 76 65 | eap.RtlValidAcl.RtlValidRelative |
| 1a280 | 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 56 61 6c 69 64 53 65 63 75 72 | SecurityDescriptor.RtlValidSecur |
| 1a2a0 | 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 52 74 6c 56 61 6c 69 64 53 69 64 00 52 74 6c 56 61 6c | ityDescriptor.RtlValidSid.RtlVal |
| 1a2c0 | 69 64 61 74 65 48 65 61 70 00 52 74 6c 56 61 6c 69 64 61 74 65 50 72 6f 63 65 73 73 48 65 61 70 | idateHeap.RtlValidateProcessHeap |
| 1a2e0 | 73 00 52 74 6c 56 61 6c 69 64 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 52 74 6c 56 65 | s.RtlValidateUnicodeString.RtlVe |
| 1a300 | 72 69 66 79 56 65 72 73 69 6f 6e 49 6e 66 6f 00 52 74 6c 56 69 72 74 75 61 6c 55 6e 77 69 6e 64 | rifyVersionInfo.RtlVirtualUnwind |
| 1a320 | 00 52 74 6c 57 61 6c 6b 46 72 61 6d 65 43 68 61 69 6e 00 52 74 6c 57 61 6c 6b 48 65 61 70 00 52 | .RtlWalkFrameChain.RtlWalkHeap.R |
| 1a340 | 74 6c 57 6f 77 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f 6e 00 52 74 6c 57 6f | tlWow64EnableFsRedirection.RtlWo |
| 1a360 | 77 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f 6e 45 78 00 52 74 6c 57 72 69 74 | w64EnableFsRedirectionEx.RtlWrit |
| 1a380 | 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 52 74 6c 57 72 69 74 65 52 65 67 69 73 74 72 79 56 61 | eMemoryStream.RtlWriteRegistryVa |
| 1a3a0 | 6c 75 65 00 52 74 6c 5a 65 72 6f 48 65 61 70 00 52 74 6c 5a 65 72 6f 4d 65 6d 6f 72 79 00 52 74 | lue.RtlZeroHeap.RtlZeroMemory.Rt |
| 1a3c0 | 6c 5a 6f 6d 62 69 66 79 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 52 74 6c 70 41 70 | lZombifyActivationContext.RtlpAp |
| 1a3e0 | 70 6c 79 4c 65 6e 67 74 68 46 75 6e 63 74 69 6f 6e 00 52 74 6c 70 45 6e 73 75 72 65 42 75 66 66 | plyLengthFunction.RtlpEnsureBuff |
| 1a400 | 65 72 53 69 7a 65 00 52 74 6c 70 4e 6f 74 4f 77 6e 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 | erSize.RtlpNotOwnerCriticalSecti |
| 1a420 | 6f 6e 00 52 74 6c 70 4e 74 43 72 65 61 74 65 4b 65 79 00 52 74 6c 70 4e 74 45 6e 75 6d 65 72 61 | on.RtlpNtCreateKey.RtlpNtEnumera |
| 1a440 | 74 65 53 75 62 4b 65 79 00 52 74 6c 70 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4b 65 79 00 | teSubKey.RtlpNtMakeTemporaryKey. |
| 1a460 | 52 74 6c 70 4e 74 4f 70 65 6e 4b 65 79 00 52 74 6c 70 4e 74 51 75 65 72 79 56 61 6c 75 65 4b 65 | RtlpNtOpenKey.RtlpNtQueryValueKe |
| 1a480 | 79 00 52 74 6c 70 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 52 74 6c 70 55 6e 57 61 69 74 43 72 | y.RtlpNtSetValueKey.RtlpUnWaitCr |
| 1a4a0 | 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 52 74 6c 70 57 61 69 74 46 6f 72 43 72 69 74 69 63 61 | iticalSection.RtlpWaitForCritica |
| 1a4c0 | 6c 53 65 63 74 69 6f 6e 00 52 74 6c 78 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 | lSection.RtlxAnsiStringToUnicode |
| 1a4e0 | 53 69 7a 65 00 52 74 6c 78 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 00 | Size.RtlxOemStringToUnicodeSize. |
| 1a500 | 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 00 52 74 6c 78 | RtlxUnicodeStringToAnsiSize.Rtlx |
| 1a520 | 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 69 7a 65 00 56 65 72 53 65 74 43 6f 6e | UnicodeStringToOemSize.VerSetCon |
| 1a540 | 64 69 74 69 6f 6e 4d 61 73 6b 00 5a 77 41 63 63 65 70 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5a | ditionMask.ZwAcceptConnectPort.Z |
| 1a560 | 77 41 63 63 65 73 73 43 68 65 63 6b 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 41 6e 64 41 75 64 | wAccessCheck.ZwAccessCheckAndAud |
| 1a580 | 69 74 41 6c 61 72 6d 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 00 5a 77 41 63 | itAlarm.ZwAccessCheckByType.ZwAc |
| 1a5a0 | 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 41 | cessCheckByTypeAndAuditAlarm.ZwA |
| 1a5c0 | 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 5a 77 41 63 63 | ccessCheckByTypeResultList.ZwAcc |
| 1a5e0 | 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 | essCheckByTypeResultListAndAudit |
| 1a600 | 41 6c 61 72 6d 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c | Alarm.ZwAccessCheckByTypeResultL |
| 1a620 | 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 00 5a 77 41 64 64 41 74 | istAndAuditAlarmByHandle.ZwAddAt |
| 1a640 | 6f 6d 00 5a 77 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 5a 77 41 64 64 44 72 69 76 65 72 45 6e 74 | om.ZwAddBootEntry.ZwAddDriverEnt |
| 1a660 | 72 79 00 5a 77 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e 00 5a 77 41 64 6a 75 73 74 50 | ry.ZwAdjustGroupsToken.ZwAdjustP |
| 1a680 | 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 5a 77 41 6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 | rivilegesToken.ZwAlertResumeThre |
| 1a6a0 | 61 64 00 5a 77 41 6c 65 72 74 54 68 72 65 61 64 00 5a 77 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c | ad.ZwAlertThread.ZwAllocateLocal |
| 1a6c0 | 6c 79 55 6e 69 71 75 65 49 64 00 5a 77 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79 73 69 63 61 | lyUniqueId.ZwAllocateUserPhysica |
| 1a6e0 | 6c 50 61 67 65 73 00 5a 77 41 6c 6c 6f 63 61 74 65 55 75 69 64 73 00 5a 77 41 6c 6c 6f 63 61 74 | lPages.ZwAllocateUuids.ZwAllocat |
| 1a700 | 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 41 70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e | eVirtualMemory.ZwApphelpCacheCon |
| 1a720 | 74 72 6f 6c 00 5a 77 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 00 5a 77 41 | trol.ZwAreMappedFilesTheSame.ZwA |
| 1a740 | 73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 43 61 6c 6c 62 61 | ssignProcessToJobObject.ZwCallba |
| 1a760 | 63 6b 52 65 74 75 72 6e 00 5a 77 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71 | ckReturn.ZwCancelDeviceWakeupReq |
| 1a780 | 75 65 73 74 00 5a 77 43 61 6e 63 65 6c 49 6f 46 69 6c 65 00 5a 77 43 61 6e 63 65 6c 54 69 6d 65 | uest.ZwCancelIoFile.ZwCancelTime |
| 1a7a0 | 72 00 5a 77 43 6c 65 61 72 45 76 65 6e 74 00 5a 77 43 6c 6f 73 65 00 5a 77 43 6c 6f 73 65 4f 62 | r.ZwClearEvent.ZwClose.ZwCloseOb |
| 1a7c0 | 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 43 6f 6d 70 61 63 74 4b 65 79 73 00 5a 77 43 | jectAuditAlarm.ZwCompactKeys.ZwC |
| 1a7e0 | 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 5a 77 43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f | ompareTokens.ZwCompleteConnectPo |
| 1a800 | 72 74 00 5a 77 43 6f 6d 70 72 65 73 73 4b 65 79 00 5a 77 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5a | rt.ZwCompressKey.ZwConnectPort.Z |
| 1a820 | 77 43 6f 6e 74 69 6e 75 65 00 5a 77 43 72 65 61 74 65 44 65 62 75 67 4f 62 6a 65 63 74 00 5a 77 | wContinue.ZwCreateDebugObject.Zw |
| 1a840 | 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5a 77 43 72 65 61 74 65 45 76 | CreateDirectoryObject.ZwCreateEv |
| 1a860 | 65 6e 74 00 5a 77 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72 00 5a 77 43 72 65 61 74 65 46 69 | ent.ZwCreateEventPair.ZwCreateFi |
| 1a880 | 6c 65 00 5a 77 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 43 72 65 61 74 65 | le.ZwCreateIoCompletion.ZwCreate |
| 1a8a0 | 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 43 72 65 61 74 65 4a 6f 62 53 65 74 00 5a 77 43 72 65 61 74 | JobObject.ZwCreateJobSet.ZwCreat |
| 1a8c0 | 65 4b 65 79 00 5a 77 43 72 65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 00 5a 77 43 72 65 61 74 65 | eKey.ZwCreateKeyedEvent.ZwCreate |
| 1a8e0 | 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 5a 77 43 72 65 61 74 65 4d 75 74 61 6e 74 00 5a 77 43 72 | MailslotFile.ZwCreateMutant.ZwCr |
| 1a900 | 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 00 5a 77 43 72 65 61 74 65 50 61 67 69 6e 67 | eateNamedPipeFile.ZwCreatePaging |
| 1a920 | 46 69 6c 65 00 5a 77 43 72 65 61 74 65 50 6f 72 74 00 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 | File.ZwCreatePort.ZwCreateProces |
| 1a940 | 73 00 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 78 00 5a 77 43 72 65 61 74 65 50 72 6f 66 | s.ZwCreateProcessEx.ZwCreateProf |
| 1a960 | 69 6c 65 00 5a 77 43 72 65 61 74 65 53 65 63 74 69 6f 6e 00 5a 77 43 72 65 61 74 65 53 65 6d 61 | ile.ZwCreateSection.ZwCreateSema |
| 1a980 | 70 68 6f 72 65 00 5a 77 43 72 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 | phore.ZwCreateSymbolicLinkObject |
| 1a9a0 | 00 5a 77 43 72 65 61 74 65 54 68 72 65 61 64 00 5a 77 43 72 65 61 74 65 54 69 6d 65 72 00 5a 77 | .ZwCreateThread.ZwCreateTimer.Zw |
| 1a9c0 | 43 72 65 61 74 65 54 6f 6b 65 6e 00 5a 77 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f 72 74 | CreateToken.ZwCreateWaitablePort |
| 1a9e0 | 00 5a 77 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 5a 77 44 65 62 75 67 43 6f 6e | .ZwDebugActiveProcess.ZwDebugCon |
| 1aa00 | 74 69 6e 75 65 00 5a 77 44 65 6c 61 79 45 78 65 63 75 74 69 6f 6e 00 5a 77 44 65 6c 65 74 65 41 | tinue.ZwDelayExecution.ZwDeleteA |
| 1aa20 | 74 6f 6d 00 5a 77 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 5a 77 44 65 6c 65 74 65 44 72 | tom.ZwDeleteBootEntry.ZwDeleteDr |
| 1aa40 | 69 76 65 72 45 6e 74 72 79 00 5a 77 44 65 6c 65 74 65 46 69 6c 65 00 5a 77 44 65 6c 65 74 65 4b | iverEntry.ZwDeleteFile.ZwDeleteK |
| 1aa60 | 65 79 00 5a 77 44 65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5a 77 44 65 | ey.ZwDeleteObjectAuditAlarm.ZwDe |
| 1aa80 | 6c 65 74 65 56 61 6c 75 65 4b 65 79 00 5a 77 44 65 76 69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 | leteValueKey.ZwDeviceIoControlFi |
| 1aaa0 | 6c 65 00 5a 77 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 5a 77 44 75 70 6c 69 63 61 74 65 4f 62 | le.ZwDisplayString.ZwDuplicateOb |
| 1aac0 | 6a 65 63 74 00 5a 77 44 75 70 6c 69 63 61 74 65 54 6f 6b 65 6e 00 5a 77 45 6e 75 6d 65 72 61 74 | ject.ZwDuplicateToken.ZwEnumerat |
| 1aae0 | 65 42 6f 6f 74 45 6e 74 72 69 65 73 00 5a 77 45 6e 75 6d 65 72 61 74 65 44 72 69 76 65 72 45 6e | eBootEntries.ZwEnumerateDriverEn |
| 1ab00 | 74 72 69 65 73 00 5a 77 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 5a 77 45 6e 75 6d 65 72 61 74 65 | tries.ZwEnumerateKey.ZwEnumerate |
| 1ab20 | 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 00 5a 77 45 6e 75 6d | SystemEnvironmentValuesEx.ZwEnum |
| 1ab40 | 65 72 61 74 65 56 61 6c 75 65 4b 65 79 00 5a 77 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 00 5a 77 | erateValueKey.ZwExtendSection.Zw |
| 1ab60 | 46 69 6c 74 65 72 54 6f 6b 65 6e 00 5a 77 46 69 6e 64 41 74 6f 6d 00 5a 77 46 6c 75 73 68 42 75 | FilterToken.ZwFindAtom.ZwFlushBu |
| 1ab80 | 66 66 65 72 73 46 69 6c 65 00 5a 77 46 6c 75 73 68 49 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 | ffersFile.ZwFlushInstructionCach |
| 1aba0 | 65 00 5a 77 46 6c 75 73 68 4b 65 79 00 5a 77 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 | e.ZwFlushKey.ZwFlushVirtualMemor |
| 1abc0 | 79 00 5a 77 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72 00 5a 77 46 72 65 65 55 73 65 72 50 | y.ZwFlushWriteBuffer.ZwFreeUserP |
| 1abe0 | 68 79 73 69 63 61 6c 50 61 67 65 73 00 5a 77 46 72 65 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 | hysicalPages.ZwFreeVirtualMemory |
| 1ac00 | 00 5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 5a 77 47 65 74 43 6f 6e 74 65 78 74 54 68 72 | .ZwFsControlFile.ZwGetContextThr |
| 1ac20 | 65 61 64 00 5a 77 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 | ead.ZwGetCurrentProcessorNumber. |
| 1ac40 | 5a 77 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 65 00 5a 77 47 65 74 50 6c 75 67 50 | ZwGetDevicePowerState.ZwGetPlugP |
| 1ac60 | 6c 61 79 45 76 65 6e 74 00 5a 77 47 65 74 57 72 69 74 65 57 61 74 63 68 00 5a 77 49 6d 70 65 72 | layEvent.ZwGetWriteWatch.ZwImper |
| 1ac80 | 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 00 5a 77 49 6d 70 65 72 73 6f 6e 61 | sonateAnonymousToken.ZwImpersona |
| 1aca0 | 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 00 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 | teClientOfPort.ZwImpersonateThre |
| 1acc0 | 61 64 00 5a 77 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74 72 79 00 5a 77 49 6e 69 74 69 61 | ad.ZwInitializeRegistry.ZwInitia |
| 1ace0 | 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 00 5a 77 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f 62 00 5a | tePowerAction.ZwIsProcessInJob.Z |
| 1ad00 | 77 49 73 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 5a 77 4c 69 73 74 65 | wIsSystemResumeAutomatic.ZwListe |
| 1ad20 | 6e 50 6f 72 74 00 5a 77 4c 6f 61 64 44 72 69 76 65 72 00 5a 77 4c 6f 61 64 4b 65 79 00 5a 77 4c | nPort.ZwLoadDriver.ZwLoadKey.ZwL |
| 1ad40 | 6f 61 64 4b 65 79 32 00 5a 77 4c 6f 61 64 4b 65 79 45 78 00 5a 77 4c 6f 63 6b 46 69 6c 65 00 5a | oadKey2.ZwLoadKeyEx.ZwLockFile.Z |
| 1ad60 | 77 4c 6f 63 6b 50 72 6f 64 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 5a 77 4c 6f 63 | wLockProductActivationKeys.ZwLoc |
| 1ad80 | 6b 52 65 67 69 73 74 72 79 4b 65 79 00 5a 77 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 | kRegistryKey.ZwLockVirtualMemory |
| 1ada0 | 00 5a 77 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 74 00 5a 77 4d 61 6b 65 54 65 6d | .ZwMakePermanentObject.ZwMakeTem |
| 1adc0 | 70 6f 72 61 72 79 4f 62 6a 65 63 74 00 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 | poraryObject.ZwMapUserPhysicalPa |
| 1ade0 | 67 65 73 00 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74 65 | ges.ZwMapUserPhysicalPagesScatte |
| 1ae00 | 72 00 5a 77 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5a 77 4d 6f 64 69 66 79 42 6f 6f | r.ZwMapViewOfSection.ZwModifyBoo |
| 1ae20 | 74 45 6e 74 72 79 00 5a 77 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72 79 00 5a 77 4e 6f 74 | tEntry.ZwModifyDriverEntry.ZwNot |
| 1ae40 | 69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5a 77 4e 6f 74 69 66 79 43 | ifyChangeDirectoryFile.ZwNotifyC |
| 1ae60 | 68 61 6e 67 65 4b 65 79 00 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69 70 6c 65 4b | hangeKey.ZwNotifyChangeMultipleK |
| 1ae80 | 65 79 73 00 5a 77 4f 70 65 6e 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5a 77 4f 70 65 6e | eys.ZwOpenDirectoryObject.ZwOpen |
| 1aea0 | 45 76 65 6e 74 00 5a 77 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 5a 77 4f 70 65 6e 46 69 6c 65 | Event.ZwOpenEventPair.ZwOpenFile |
| 1aec0 | 00 5a 77 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a | .ZwOpenIoCompletion.ZwOpenJobObj |
| 1aee0 | 65 63 74 00 5a 77 4f 70 65 6e 4b 65 79 00 5a 77 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e 74 00 5a | ect.ZwOpenKey.ZwOpenKeyedEvent.Z |
| 1af00 | 77 4f 70 65 6e 4d 75 74 61 6e 74 00 5a 77 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 | wOpenMutant.ZwOpenObjectAuditAla |
| 1af20 | 72 6d 00 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 00 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f | rm.ZwOpenProcess.ZwOpenProcessTo |
| 1af40 | 6b 65 6e 00 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 00 5a 77 4f 70 65 6e 53 | ken.ZwOpenProcessTokenEx.ZwOpenS |
| 1af60 | 65 63 74 69 6f 6e 00 5a 77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 5a 77 4f 70 65 6e 53 79 6d | ection.ZwOpenSemaphore.ZwOpenSym |
| 1af80 | 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5a 77 4f 70 65 6e 54 68 72 65 61 64 00 5a 77 4f | bolicLinkObject.ZwOpenThread.ZwO |
| 1afa0 | 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 00 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e | penThreadToken.ZwOpenThreadToken |
| 1afc0 | 45 78 00 5a 77 4f 70 65 6e 54 69 6d 65 72 00 5a 77 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c | Ex.ZwOpenTimer.ZwPlugPlayControl |
| 1afe0 | 00 5a 77 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5a 77 50 72 69 76 69 6c 65 67 65 43 | .ZwPowerInformation.ZwPrivilegeC |
| 1b000 | 68 65 63 6b 00 5a 77 50 72 69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d | heck.ZwPrivilegeObjectAuditAlarm |
| 1b020 | 00 5a 77 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 00 5a | .ZwPrivilegedServiceAuditAlarm.Z |
| 1b040 | 77 50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 50 75 6c 73 65 45 76 65 | wProtectVirtualMemory.ZwPulseEve |
| 1b060 | 6e 74 00 5a 77 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 5a 77 51 75 65 72 79 | nt.ZwQueryAttributesFile.ZwQuery |
| 1b080 | 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 5a 77 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e | BootEntryOrder.ZwQueryBootOption |
| 1b0a0 | 73 00 5a 77 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5a 77 51 75 65 72 | s.ZwQueryDebugFilterState.ZwQuer |
| 1b0c0 | 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c | yDefaultLocale.ZwQueryDefaultUIL |
| 1b0e0 | 61 6e 67 75 61 67 65 00 5a 77 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5a 77 51 | anguage.ZwQueryDirectoryFile.ZwQ |
| 1b100 | 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5a 77 51 75 65 72 79 44 72 69 76 65 | ueryDirectoryObject.ZwQueryDrive |
| 1b120 | 72 45 6e 74 72 79 4f 72 64 65 72 00 5a 77 51 75 65 72 79 45 61 46 69 6c 65 00 5a 77 51 75 65 72 | rEntryOrder.ZwQueryEaFile.ZwQuer |
| 1b140 | 79 45 76 65 6e 74 00 5a 77 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 | yEvent.ZwQueryFullAttributesFile |
| 1b160 | 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 00 5a 77 51 75 65 72 79 49 | .ZwQueryInformationAtom.ZwQueryI |
| 1b180 | 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f | nformationFile.ZwQueryInformatio |
| 1b1a0 | 6e 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 | nJobObject.ZwQueryInformationPor |
| 1b1c0 | 74 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5a 77 51 75 | t.ZwQueryInformationProcess.ZwQu |
| 1b1e0 | 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5a 77 51 75 65 72 79 49 6e 66 6f | eryInformationThread.ZwQueryInfo |
| 1b200 | 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 5a 77 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e | rmationToken.ZwQueryInstallUILan |
| 1b220 | 67 75 61 67 65 00 5a 77 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 5a 77 51 | guage.ZwQueryIntervalProfile.ZwQ |
| 1b240 | 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 51 75 65 72 79 4b 65 79 00 5a 77 51 75 | ueryIoCompletion.ZwQueryKey.ZwQu |
| 1b260 | 65 72 79 4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 00 5a 77 51 75 65 72 79 4d 75 74 61 6e | eryMultipleValueKey.ZwQueryMutan |
| 1b280 | 74 00 5a 77 51 75 65 72 79 4f 62 6a 65 63 74 00 5a 77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 | t.ZwQueryObject.ZwQueryOpenSubKe |
| 1b2a0 | 79 73 00 5a 77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 00 5a 77 51 75 65 72 79 50 | ys.ZwQueryOpenSubKeysEx.ZwQueryP |
| 1b2c0 | 65 72 66 6f 72 6d 61 6e 63 65 43 6f 75 6e 74 65 72 00 5a 77 51 75 65 72 79 50 6f 72 74 49 6e 66 | erformanceCounter.ZwQueryPortInf |
| 1b2e0 | 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5a 77 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f | ormationProcess.ZwQueryQuotaInfo |
| 1b300 | 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 51 75 65 72 79 53 65 63 74 69 6f 6e 00 5a 77 51 75 65 | rmationFile.ZwQuerySection.ZwQue |
| 1b320 | 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5a 77 51 75 65 72 79 53 65 6d 61 70 68 6f 72 | rySecurityObject.ZwQuerySemaphor |
| 1b340 | 65 00 5a 77 51 75 65 72 79 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5a 77 51 75 | e.ZwQuerySymbolicLinkObject.ZwQu |
| 1b360 | 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5a 77 51 75 65 72 | erySystemEnvironmentValue.ZwQuer |
| 1b380 | 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5a 77 51 75 65 72 | ySystemEnvironmentValueEx.ZwQuer |
| 1b3a0 | 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5a 77 51 75 65 72 79 53 79 73 74 65 6d | ySystemInformation.ZwQuerySystem |
| 1b3c0 | 54 69 6d 65 00 5a 77 51 75 65 72 79 54 69 6d 65 72 00 5a 77 51 75 65 72 79 54 69 6d 65 72 52 65 | Time.ZwQueryTimer.ZwQueryTimerRe |
| 1b3e0 | 73 6f 6c 75 74 69 6f 6e 00 5a 77 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 5a 77 51 75 65 72 79 | solution.ZwQueryValueKey.ZwQuery |
| 1b400 | 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 | VirtualMemory.ZwQueryVolumeInfor |
| 1b420 | 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 51 75 65 75 65 41 70 63 54 68 72 65 61 64 00 5a 77 52 61 | mationFile.ZwQueueApcThread.ZwRa |
| 1b440 | 69 73 65 45 78 63 65 70 74 69 6f 6e 00 5a 77 52 61 69 73 65 48 61 72 64 45 72 72 6f 72 00 5a 77 | iseException.ZwRaiseHardError.Zw |
| 1b460 | 52 65 61 64 46 69 6c 65 00 5a 77 52 65 61 64 46 69 6c 65 53 63 61 74 74 65 72 00 5a 77 52 65 61 | ReadFile.ZwReadFileScatter.ZwRea |
| 1b480 | 64 52 65 71 75 65 73 74 44 61 74 61 00 5a 77 52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 | dRequestData.ZwReadVirtualMemory |
| 1b4a0 | 00 5a 77 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f 72 74 00 5a | .ZwRegisterThreadTerminatePort.Z |
| 1b4c0 | 77 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 00 5a 77 52 65 6c 65 61 73 65 4d 75 74 61 | wReleaseKeyedEvent.ZwReleaseMuta |
| 1b4e0 | 6e 74 00 5a 77 52 65 6c 65 61 73 65 53 65 6d 61 70 68 6f 72 65 00 5a 77 52 65 6d 6f 76 65 49 6f | nt.ZwReleaseSemaphore.ZwRemoveIo |
| 1b500 | 43 6f 6d 70 6c 65 74 69 6f 6e 00 5a 77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75 67 00 | Completion.ZwRemoveProcessDebug. |
| 1b520 | 5a 77 52 65 6e 61 6d 65 4b 65 79 00 5a 77 52 65 70 6c 61 63 65 4b 65 79 00 5a 77 52 65 70 6c 79 | ZwRenameKey.ZwReplaceKey.ZwReply |
| 1b540 | 50 6f 72 74 00 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 00 5a 77 52 65 | Port.ZwReplyWaitReceivePort.ZwRe |
| 1b560 | 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78 00 5a 77 52 65 70 6c 79 57 61 69 74 | plyWaitReceivePortEx.ZwReplyWait |
| 1b580 | 52 65 70 6c 79 50 6f 72 74 00 5a 77 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b 65 75 70 00 | ReplyPort.ZwRequestDeviceWakeup. |
| 1b5a0 | 5a 77 52 65 71 75 65 73 74 50 6f 72 74 00 5a 77 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 | ZwRequestPort.ZwRequestWaitReply |
| 1b5c0 | 50 6f 72 74 00 5a 77 52 65 71 75 65 73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 5a 77 52 65 | Port.ZwRequestWakeupLatency.ZwRe |
| 1b5e0 | 73 65 74 45 76 65 6e 74 00 5a 77 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68 00 5a 77 52 65 73 | setEvent.ZwResetWriteWatch.ZwRes |
| 1b600 | 74 6f 72 65 4b 65 79 00 5a 77 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 5a 77 52 65 73 75 6d 65 | toreKey.ZwResumeProcess.ZwResume |
| 1b620 | 54 68 72 65 61 64 00 5a 77 53 61 76 65 4b 65 79 00 5a 77 53 61 76 65 4b 65 79 45 78 00 5a 77 53 | Thread.ZwSaveKey.ZwSaveKeyEx.ZwS |
| 1b640 | 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 5a 77 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 | aveMergedKeys.ZwSecureConnectPor |
| 1b660 | 74 00 5a 77 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 5a 77 53 65 74 42 6f 6f 74 4f | t.ZwSetBootEntryOrder.ZwSetBootO |
| 1b680 | 70 74 69 6f 6e 73 00 5a 77 53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 5a 77 53 65 74 44 | ptions.ZwSetContextThread.ZwSetD |
| 1b6a0 | 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5a 77 53 65 74 44 65 66 61 75 6c 74 48 61 72 64 | ebugFilterState.ZwSetDefaultHard |
| 1b6c0 | 45 72 72 6f 72 50 6f 72 74 00 5a 77 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5a 77 53 | ErrorPort.ZwSetDefaultLocale.ZwS |
| 1b6e0 | 65 74 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5a 77 53 65 74 44 72 69 76 65 72 45 | etDefaultUILanguage.ZwSetDriverE |
| 1b700 | 6e 74 72 79 4f 72 64 65 72 00 5a 77 53 65 74 45 61 46 69 6c 65 00 5a 77 53 65 74 45 76 65 6e 74 | ntryOrder.ZwSetEaFile.ZwSetEvent |
| 1b720 | 00 5a 77 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 6f 72 69 74 79 00 5a 77 53 65 74 48 69 | .ZwSetEventBoostPriority.ZwSetHi |
| 1b740 | 67 68 45 76 65 6e 74 50 61 69 72 00 5a 77 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65 6e | ghEventPair.ZwSetHighWaitLowEven |
| 1b760 | 74 50 61 69 72 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 | tPair.ZwSetInformationDebugObjec |
| 1b780 | 74 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 53 65 74 49 6e 66 6f | t.ZwSetInformationFile.ZwSetInfo |
| 1b7a0 | 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f | rmationJobObject.ZwSetInformatio |
| 1b7c0 | 6e 4b 65 79 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 5a 77 53 65 | nKey.ZwSetInformationObject.ZwSe |
| 1b7e0 | 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 | tInformationProcess.ZwSetInforma |
| 1b800 | 74 69 6f 6e 54 68 72 65 61 64 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e | tionThread.ZwSetInformationToken |
| 1b820 | 00 5a 77 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 5a 77 53 65 74 49 6f 43 6f 6d | .ZwSetIntervalProfile.ZwSetIoCom |
| 1b840 | 70 6c 65 74 69 6f 6e 00 5a 77 53 65 74 4c 64 74 45 6e 74 72 69 65 73 00 5a 77 53 65 74 4c 6f 77 | pletion.ZwSetLdtEntries.ZwSetLow |
| 1b860 | 45 76 65 6e 74 50 61 69 72 00 5a 77 53 65 74 4c 6f 77 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 | EventPair.ZwSetLowWaitHighEventP |
| 1b880 | 61 69 72 00 5a 77 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 | air.ZwSetQuotaInformationFile.Zw |
| 1b8a0 | 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5a 77 53 65 74 53 79 73 74 65 6d 45 6e 76 | SetSecurityObject.ZwSetSystemEnv |
| 1b8c0 | 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5a 77 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e | ironmentValue.ZwSetSystemEnviron |
| 1b8e0 | 6d 65 6e 74 56 61 6c 75 65 45 78 00 5a 77 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 | mentValueEx.ZwSetSystemInformati |
| 1b900 | 6f 6e 00 5a 77 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 53 74 61 74 65 00 5a 77 53 65 74 53 79 | on.ZwSetSystemPowerState.ZwSetSy |
| 1b920 | 73 74 65 6d 54 69 6d 65 00 5a 77 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 61 | stemTime.ZwSetThreadExecutionSta |
| 1b940 | 74 65 00 5a 77 53 65 74 54 69 6d 65 72 00 5a 77 53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 | te.ZwSetTimer.ZwSetTimerResoluti |
| 1b960 | 6f 6e 00 5a 77 53 65 74 55 75 69 64 53 65 65 64 00 5a 77 53 65 74 56 61 6c 75 65 4b 65 79 00 5a | on.ZwSetUuidSeed.ZwSetValueKey.Z |
| 1b980 | 77 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5a 77 53 68 75 74 | wSetVolumeInformationFile.ZwShut |
| 1b9a0 | 64 6f 77 6e 53 79 73 74 65 6d 00 5a 77 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53 69 6e | downSystem.ZwSignalAndWaitForSin |
| 1b9c0 | 67 6c 65 4f 62 6a 65 63 74 00 5a 77 53 74 61 72 74 50 72 6f 66 69 6c 65 00 5a 77 53 74 6f 70 50 | gleObject.ZwStartProfile.ZwStopP |
| 1b9e0 | 72 6f 66 69 6c 65 00 5a 77 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 5a 77 53 75 73 70 65 6e | rofile.ZwSuspendProcess.ZwSuspen |
| 1ba00 | 64 54 68 72 65 61 64 00 5a 77 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 00 5a 77 54 | dThread.ZwSystemDebugControl.ZwT |
| 1ba20 | 65 72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 5a 77 54 65 72 6d 69 6e 61 74 65 50 72 6f | erminateJobObject.ZwTerminatePro |
| 1ba40 | 63 65 73 73 00 5a 77 54 65 72 6d 69 6e 61 74 65 54 68 72 65 61 64 00 5a 77 54 65 73 74 41 6c 65 | cess.ZwTerminateThread.ZwTestAle |
| 1ba60 | 72 74 00 5a 77 54 72 61 63 65 45 76 65 6e 74 00 5a 77 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 | rt.ZwTraceEvent.ZwTranslateFileP |
| 1ba80 | 61 74 68 00 5a 77 55 6e 6c 6f 61 64 44 72 69 76 65 72 00 5a 77 55 6e 6c 6f 61 64 4b 65 79 00 5a | ath.ZwUnloadDriver.ZwUnloadKey.Z |
| 1baa0 | 77 55 6e 6c 6f 61 64 4b 65 79 32 00 5a 77 55 6e 6c 6f 61 64 4b 65 79 45 78 00 5a 77 55 6e 6c 6f | wUnloadKey2.ZwUnloadKeyEx.ZwUnlo |
| 1bac0 | 63 6b 46 69 6c 65 00 5a 77 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 55 | ckFile.ZwUnlockVirtualMemory.ZwU |
| 1bae0 | 6e 6d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5a 77 56 64 6d 43 6f 6e 74 72 6f 6c 00 5a | nmapViewOfSection.ZwVdmControl.Z |
| 1bb00 | 77 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e 74 00 5a 77 57 61 69 74 46 6f 72 4b 65 79 65 | wWaitForDebugEvent.ZwWaitForKeye |
| 1bb20 | 64 45 76 65 6e 74 00 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 | dEvent.ZwWaitForMultipleObjects. |
| 1bb40 | 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 33 32 00 5a 77 57 61 69 | ZwWaitForMultipleObjects32.ZwWai |
| 1bb60 | 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 5a 77 57 61 69 74 48 69 67 68 45 76 65 6e 74 | tForSingleObject.ZwWaitHighEvent |
| 1bb80 | 50 61 69 72 00 5a 77 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5a 77 57 72 69 74 65 46 | Pair.ZwWaitLowEventPair.ZwWriteF |
| 1bba0 | 69 6c 65 00 5a 77 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 5a 77 57 72 69 74 65 52 65 71 | ile.ZwWriteFileGather.ZwWriteReq |
| 1bbc0 | 75 65 73 74 44 61 74 61 00 5a 77 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5a 77 | uestData.ZwWriteVirtualMemory.Zw |
| 1bbe0 | 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 00 5f 5f 43 5f 73 70 65 63 69 66 69 63 5f 68 61 6e 64 | YieldExecution.__C_specific_hand |
| 1bc00 | 6c 65 72 00 5f 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 5f 6e 74 64 6c 6c 00 5f 5f | ler.__IMPORT_DESCRIPTOR_ntdll.__ |
| 1bc20 | 4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 00 5f 5f 63 68 6b 73 74 6b 00 | NULL_IMPORT_DESCRIPTOR.__chkstk. |
| 1bc40 | 5f 5f 69 6d 70 5f 3f 50 72 6f 70 65 72 74 79 4c 65 6e 67 74 68 41 73 56 61 72 69 61 6e 74 40 40 | __imp_?PropertyLengthAsVariant@@ |
| 1bc60 | 59 41 4b 50 45 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 | YAKPEBUtagSERIALIZEDPROPERTYVALU |
| 1bc80 | 45 40 40 4b 47 45 40 5a 00 5f 5f 69 6d 70 5f 3f 52 74 6c 43 6f 6e 76 65 72 74 50 72 6f 70 65 72 | E@@KGE@Z.__imp_?RtlConvertProper |
| 1bca0 | 74 79 54 6f 56 61 72 69 61 6e 74 40 40 59 41 45 50 45 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 | tyToVariant@@YAEPEBUtagSERIALIZE |
| 1bcc0 | 44 50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 47 50 45 41 55 74 61 67 50 52 4f 50 56 41 52 49 | DPROPERTYVALUE@@GPEAUtagPROPVARI |
| 1bce0 | 41 4e 54 40 40 50 45 41 56 50 4d 65 6d 6f 72 79 41 6c 6c 6f 63 61 74 6f 72 40 40 40 5a 00 5f 5f | ANT@@PEAVPMemoryAllocator@@@Z.__ |
| 1bd00 | 69 6d 70 5f 3f 52 74 6c 43 6f 6e 76 65 72 74 56 61 72 69 61 6e 74 54 6f 50 72 6f 70 65 72 74 79 | imp_?RtlConvertVariantToProperty |
| 1bd20 | 40 40 59 41 50 45 41 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c | @@YAPEAUtagSERIALIZEDPROPERTYVAL |
| 1bd40 | 55 45 40 40 50 45 42 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e 54 40 40 47 50 45 41 55 31 40 50 | UE@@PEBUtagPROPVARIANT@@GPEAU1@P |
| 1bd60 | 45 41 4b 4b 45 32 40 5a 00 5f 5f 69 6d 70 5f 43 73 72 41 6c 6c 6f 63 61 74 65 43 61 70 74 75 72 | EAKKE2@Z.__imp_CsrAllocateCaptur |
| 1bd80 | 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 43 73 72 41 6c 6c 6f 63 61 74 65 4d 65 73 73 61 67 65 | eBuffer.__imp_CsrAllocateMessage |
| 1bda0 | 50 6f 69 6e 74 65 72 00 5f 5f 69 6d 70 5f 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 42 | Pointer.__imp_CsrCaptureMessageB |
| 1bdc0 | 75 66 66 65 72 00 5f 5f 69 6d 70 5f 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 4d 75 6c | uffer.__imp_CsrCaptureMessageMul |
| 1bde0 | 74 69 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 73 49 6e 50 6c 61 63 65 00 5f 5f 69 6d 70 5f 43 73 | tiUnicodeStringsInPlace.__imp_Cs |
| 1be00 | 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 43 73 72 43 | rCaptureMessageString.__imp_CsrC |
| 1be20 | 61 70 74 75 72 65 54 69 6d 65 6f 75 74 00 5f 5f 69 6d 70 5f 43 73 72 43 6c 69 65 6e 74 43 61 6c | aptureTimeout.__imp_CsrClientCal |
| 1be40 | 6c 53 65 72 76 65 72 00 5f 5f 69 6d 70 5f 43 73 72 43 6c 69 65 6e 74 43 6f 6e 6e 65 63 74 54 6f | lServer.__imp_CsrClientConnectTo |
| 1be60 | 53 65 72 76 65 72 00 5f 5f 69 6d 70 5f 43 73 72 46 72 65 65 43 61 70 74 75 72 65 42 75 66 66 65 | Server.__imp_CsrFreeCaptureBuffe |
| 1be80 | 72 00 5f 5f 69 6d 70 5f 43 73 72 47 65 74 50 72 6f 63 65 73 73 49 64 00 5f 5f 69 6d 70 5f 43 73 | r.__imp_CsrGetProcessId.__imp_Cs |
| 1bea0 | 72 49 64 65 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 43 | rIdentifyAlertableThread.__imp_C |
| 1bec0 | 73 72 4e 65 77 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 43 73 72 50 72 6f 62 65 46 6f 72 52 65 61 | srNewThread.__imp_CsrProbeForRea |
| 1bee0 | 64 00 5f 5f 69 6d 70 5f 43 73 72 50 72 6f 62 65 46 6f 72 57 72 69 74 65 00 5f 5f 69 6d 70 5f 43 | d.__imp_CsrProbeForWrite.__imp_C |
| 1bf00 | 73 72 53 65 74 50 72 69 6f 72 69 74 79 43 6c 61 73 73 00 5f 5f 69 6d 70 5f 44 62 67 42 72 65 61 | srSetPriorityClass.__imp_DbgBrea |
| 1bf20 | 6b 50 6f 69 6e 74 00 5f 5f 69 6d 70 5f 44 62 67 50 72 69 6e 74 00 5f 5f 69 6d 70 5f 44 62 67 50 | kPoint.__imp_DbgPrint.__imp_DbgP |
| 1bf40 | 72 69 6e 74 45 78 00 5f 5f 69 6d 70 5f 44 62 67 50 72 69 6e 74 52 65 74 75 72 6e 43 6f 6e 74 72 | rintEx.__imp_DbgPrintReturnContr |
| 1bf60 | 6f 6c 43 00 5f 5f 69 6d 70 5f 44 62 67 50 72 6f 6d 70 74 00 5f 5f 69 6d 70 5f 44 62 67 51 75 65 | olC.__imp_DbgPrompt.__imp_DbgQue |
| 1bf80 | 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 44 62 67 53 65 74 44 | ryDebugFilterState.__imp_DbgSetD |
| 1bfa0 | 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 44 62 67 55 69 43 6f 6e 6e 65 | ebugFilterState.__imp_DbgUiConne |
| 1bfc0 | 63 74 54 6f 44 62 67 00 5f 5f 69 6d 70 5f 44 62 67 55 69 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d | ctToDbg.__imp_DbgUiContinue.__im |
| 1bfe0 | 70 5f 44 62 67 55 69 43 6f 6e 76 65 72 74 53 74 61 74 65 43 68 61 6e 67 65 53 74 72 75 63 74 75 | p_DbgUiConvertStateChangeStructu |
| 1c000 | 72 65 00 5f 5f 69 6d 70 5f 44 62 67 55 69 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 | re.__imp_DbgUiDebugActiveProcess |
| 1c020 | 00 5f 5f 69 6d 70 5f 44 62 67 55 69 47 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 | .__imp_DbgUiGetThreadDebugObject |
| 1c040 | 00 5f 5f 69 6d 70 5f 44 62 67 55 69 49 73 73 75 65 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 00 5f | .__imp_DbgUiIssueRemoteBreakin._ |
| 1c060 | 5f 69 6d 70 5f 44 62 67 55 69 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 00 5f 5f 69 6d 70 5f 44 62 | _imp_DbgUiRemoteBreakin.__imp_Db |
| 1c080 | 67 55 69 53 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 44 62 | gUiSetThreadDebugObject.__imp_Db |
| 1c0a0 | 67 55 69 53 74 6f 70 44 65 62 75 67 67 69 6e 67 00 5f 5f 69 6d 70 5f 44 62 67 55 69 57 61 69 74 | gUiStopDebugging.__imp_DbgUiWait |
| 1c0c0 | 53 74 61 74 65 43 68 61 6e 67 65 00 5f 5f 69 6d 70 5f 44 62 67 55 73 65 72 42 72 65 61 6b 50 6f | StateChange.__imp_DbgUserBreakPo |
| 1c0e0 | 69 6e 74 00 5f 5f 69 6d 70 5f 45 74 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 41 00 5f 5f 69 6d 70 | int.__imp_EtwControlTraceA.__imp |
| 1c100 | 5f 45 74 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 43 72 65 61 74 | _EtwControlTraceW.__imp_EtwCreat |
| 1c120 | 65 54 72 61 63 65 49 6e 73 74 61 6e 63 65 49 64 00 5f 5f 69 6d 70 5f 45 74 77 45 6e 61 62 6c 65 | eTraceInstanceId.__imp_EtwEnable |
| 1c140 | 54 72 61 63 65 00 5f 5f 69 6d 70 5f 45 74 77 45 6e 75 6d 65 72 61 74 65 54 72 61 63 65 47 75 69 | Trace.__imp_EtwEnumerateTraceGui |
| 1c160 | 64 73 00 5f 5f 69 6d 70 5f 45 74 77 46 6c 75 73 68 54 72 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 | ds.__imp_EtwFlushTraceA.__imp_Et |
| 1c180 | 77 46 6c 75 73 68 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 47 65 74 54 72 61 63 65 45 6e | wFlushTraceW.__imp_EtwGetTraceEn |
| 1c1a0 | 61 62 6c 65 46 6c 61 67 73 00 5f 5f 69 6d 70 5f 45 74 77 47 65 74 54 72 61 63 65 45 6e 61 62 6c | ableFlags.__imp_EtwGetTraceEnabl |
| 1c1c0 | 65 4c 65 76 65 6c 00 5f 5f 69 6d 70 5f 45 74 77 47 65 74 54 72 61 63 65 4c 6f 67 67 65 72 48 61 | eLevel.__imp_EtwGetTraceLoggerHa |
| 1c1e0 | 6e 64 6c 65 00 5f 5f 69 6d 70 5f 45 74 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 | ndle.__imp_EtwNotificationRegist |
| 1c200 | 72 61 74 69 6f 6e 41 00 5f 5f 69 6d 70 5f 45 74 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 | rationA.__imp_EtwNotificationReg |
| 1c220 | 69 73 74 72 61 74 69 6f 6e 57 00 5f 5f 69 6d 70 5f 45 74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 | istrationW.__imp_EtwQueryAllTrac |
| 1c240 | 65 73 41 00 5f 5f 69 6d 70 5f 45 74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73 57 00 5f 5f 69 | esA.__imp_EtwQueryAllTracesW.__i |
| 1c260 | 6d 70 5f 45 74 77 51 75 65 72 79 54 72 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 77 51 75 65 72 79 | mp_EtwQueryTraceA.__imp_EtwQuery |
| 1c280 | 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 52 65 63 65 69 76 65 4e 6f 74 69 66 69 63 61 74 | TraceW.__imp_EtwReceiveNotificat |
| 1c2a0 | 69 6f 6e 73 41 00 5f 5f 69 6d 70 5f 45 74 77 52 65 63 65 69 76 65 4e 6f 74 69 66 69 63 61 74 69 | ionsA.__imp_EtwReceiveNotificati |
| 1c2c0 | 6f 6e 73 57 00 5f 5f 69 6d 70 5f 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 | onsW.__imp_EtwRegisterTraceGuids |
| 1c2e0 | 41 00 5f 5f 69 6d 70 5f 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 57 00 5f | A.__imp_EtwRegisterTraceGuidsW._ |
| 1c300 | 5f 69 6d 70 5f 45 74 77 53 74 61 72 74 54 72 61 63 65 41 00 5f 5f 69 6d 70 5f 45 74 77 53 74 61 | _imp_EtwStartTraceA.__imp_EtwSta |
| 1c320 | 72 74 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 53 74 6f 70 54 72 61 63 65 41 00 5f 5f 69 | rtTraceW.__imp_EtwStopTraceA.__i |
| 1c340 | 6d 70 5f 45 74 77 53 74 6f 70 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 74 77 54 72 61 63 65 45 | mp_EtwStopTraceW.__imp_EtwTraceE |
| 1c360 | 76 65 6e 74 00 5f 5f 69 6d 70 5f 45 74 77 54 72 61 63 65 45 76 65 6e 74 49 6e 73 74 61 6e 63 65 | vent.__imp_EtwTraceEventInstance |
| 1c380 | 00 5f 5f 69 6d 70 5f 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65 00 5f 5f 69 6d 70 5f 45 74 77 | .__imp_EtwTraceMessage.__imp_Etw |
| 1c3a0 | 54 72 61 63 65 4d 65 73 73 61 67 65 56 61 00 5f 5f 69 6d 70 5f 45 74 77 55 6e 72 65 67 69 73 74 | TraceMessageVa.__imp_EtwUnregist |
| 1c3c0 | 65 72 54 72 61 63 65 47 75 69 64 73 00 5f 5f 69 6d 70 5f 45 74 77 55 70 64 61 74 65 54 72 61 63 | erTraceGuids.__imp_EtwUpdateTrac |
| 1c3e0 | 65 41 00 5f 5f 69 6d 70 5f 45 74 77 55 70 64 61 74 65 54 72 61 63 65 57 00 5f 5f 69 6d 70 5f 45 | eA.__imp_EtwUpdateTraceW.__imp_E |
| 1c400 | 74 77 70 47 65 74 54 72 61 63 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 45 74 77 70 53 65 74 48 | twpGetTraceBuffer.__imp_EtwpSetH |
| 1c420 | 57 43 6f 6e 66 69 67 46 75 6e 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4b 69 52 61 69 73 65 55 73 65 | WConfigFunction.__imp_KiRaiseUse |
| 1c440 | 72 45 78 63 65 70 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72 00 5f 5f 69 6d 70 5f 4b 69 55 73 65 | rExceptionDispatcher.__imp_KiUse |
| 1c460 | 72 41 70 63 44 69 73 70 61 74 63 68 65 72 00 5f 5f 69 6d 70 5f 4b 69 55 73 65 72 43 61 6c 6c 62 | rApcDispatcher.__imp_KiUserCallb |
| 1c480 | 61 63 6b 44 69 73 70 61 74 63 68 65 72 00 5f 5f 69 6d 70 5f 4b 69 55 73 65 72 45 78 63 65 70 74 | ackDispatcher.__imp_KiUserExcept |
| 1c4a0 | 69 6f 6e 44 69 73 70 61 74 63 68 65 72 00 5f 5f 69 6d 70 5f 4c 64 72 41 63 63 65 73 73 4f 75 74 | ionDispatcher.__imp_LdrAccessOut |
| 1c4c0 | 4f 66 50 72 6f 63 65 73 73 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 4c 64 72 41 63 63 65 73 | OfProcessResource.__imp_LdrAcces |
| 1c4e0 | 73 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 4c 64 72 41 64 64 52 65 66 44 6c 6c 00 5f 5f 69 | sResource.__imp_LdrAddRefDll.__i |
| 1c500 | 6d 70 5f 4c 64 72 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 73 45 6e 61 62 6c 65 64 00 | mp_LdrAlternateResourcesEnabled. |
| 1c520 | 5f 5f 69 6d 70 5f 4c 64 72 43 72 65 61 74 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 | __imp_LdrCreateOutOfProcessImage |
| 1c540 | 00 5f 5f 69 6d 70 5f 4c 64 72 44 65 73 74 72 6f 79 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 | .__imp_LdrDestroyOutOfProcessIma |
| 1c560 | 67 65 00 5f 5f 69 6d 70 5f 4c 64 72 44 69 73 61 62 6c 65 54 68 72 65 61 64 43 61 6c 6c 6f 75 74 | ge.__imp_LdrDisableThreadCallout |
| 1c580 | 73 46 6f 72 44 6c 6c 00 5f 5f 69 6d 70 5f 4c 64 72 45 6e 75 6d 52 65 73 6f 75 72 63 65 73 00 5f | sForDll.__imp_LdrEnumResources._ |
| 1c5a0 | 5f 69 6d 70 5f 4c 64 72 45 6e 75 6d 65 72 61 74 65 4c 6f 61 64 65 64 4d 6f 64 75 6c 65 73 00 5f | _imp_LdrEnumerateLoadedModules._ |
| 1c5c0 | 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 43 72 65 61 74 65 50 72 6f 63 65 73 73 4d 61 6e 69 66 65 73 | _imp_LdrFindCreateProcessManifes |
| 1c5e0 | 74 00 5f 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 45 6e 74 72 79 46 6f 72 41 64 64 72 65 73 73 00 5f | t.__imp_LdrFindEntryForAddress._ |
| 1c600 | 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 44 69 72 65 63 74 6f 72 79 5f 55 00 | _imp_LdrFindResourceDirectory_U. |
| 1c620 | 5f 5f 69 6d 70 5f 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 45 78 5f 55 00 5f 5f 69 6d 70 5f | __imp_LdrFindResourceEx_U.__imp_ |
| 1c640 | 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 5f 55 00 5f 5f 69 6d 70 5f 4c 64 72 46 6c 75 73 68 | LdrFindResource_U.__imp_LdrFlush |
| 1c660 | 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 73 00 5f 5f 69 6d 70 5f 4c | AlternateResourceModules.__imp_L |
| 1c680 | 64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 4c 64 72 47 65 74 44 6c 6c 48 61 | drGetDllHandle.__imp_LdrGetDllHa |
| 1c6a0 | 6e 64 6c 65 45 78 00 5f 5f 69 6d 70 5f 4c 64 72 47 65 74 4b 6e 6f 77 6e 44 6c 6c 53 65 63 74 69 | ndleEx.__imp_LdrGetKnownDllSecti |
| 1c6c0 | 6f 6e 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 4c 64 72 47 65 74 50 72 6f 63 65 64 75 72 65 41 64 | onHandle.__imp_LdrGetProcedureAd |
| 1c6e0 | 64 72 65 73 73 00 5f 5f 69 6d 70 5f 4c 64 72 48 6f 74 50 61 74 63 68 52 6f 75 74 69 6e 65 00 5f | dress.__imp_LdrHotPatchRoutine._ |
| 1c700 | 5f 69 6d 70 5f 4c 64 72 49 6e 69 74 53 68 69 6d 45 6e 67 69 6e 65 44 79 6e 61 6d 69 63 00 5f 5f | _imp_LdrInitShimEngineDynamic.__ |
| 1c720 | 69 6d 70 5f 4c 64 72 49 6e 69 74 69 61 6c 69 7a 65 54 68 75 6e 6b 00 5f 5f 69 6d 70 5f 4c 64 72 | imp_LdrInitializeThunk.__imp_Ldr |
| 1c740 | 4c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 00 5f 5f 69 6d | LoadAlternateResourceModule.__im |
| 1c760 | 70 5f 4c 64 72 4c 6f 61 64 44 6c 6c 00 5f 5f 69 6d 70 5f 4c 64 72 4c 6f 63 6b 4c 6f 61 64 65 72 | p_LdrLoadDll.__imp_LdrLockLoader |
| 1c780 | 4c 6f 63 6b 00 5f 5f 69 6d 70 5f 4c 64 72 4f 70 65 6e 49 6d 61 67 65 46 69 6c 65 4f 70 74 69 6f | Lock.__imp_LdrOpenImageFileOptio |
| 1c7a0 | 6e 73 4b 65 79 00 5f 5f 69 6d 70 5f 4c 64 72 50 72 6f 63 65 73 73 49 6e 69 74 69 61 6c 69 7a 61 | nsKey.__imp_LdrProcessInitializa |
| 1c7c0 | 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 00 5f 5f 69 6d 70 5f 4c 64 72 50 72 6f 63 65 73 73 52 65 6c | tionComplete.__imp_LdrProcessRel |
| 1c7e0 | 6f 63 61 74 69 6f 6e 42 6c 6f 63 6b 00 5f 5f 69 6d 70 5f 4c 64 72 51 75 65 72 79 49 6d 61 67 65 | ocationBlock.__imp_LdrQueryImage |
| 1c800 | 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 4c 64 72 51 75 | FileExecutionOptions.__imp_LdrQu |
| 1c820 | 65 72 79 49 6d 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 45 78 00 5f | eryImageFileExecutionOptionsEx._ |
| 1c840 | 5f 69 6d 70 5f 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 4b 65 79 4f 70 74 69 6f 6e 00 | _imp_LdrQueryImageFileKeyOption. |
| 1c860 | 5f 5f 69 6d 70 5f 4c 64 72 51 75 65 72 79 50 72 6f 63 65 73 73 4d 6f 64 75 6c 65 49 6e 66 6f 72 | __imp_LdrQueryProcessModuleInfor |
| 1c880 | 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4c 64 72 53 65 74 41 70 70 43 6f 6d 70 61 74 44 6c 6c 52 | mation.__imp_LdrSetAppCompatDllR |
| 1c8a0 | 65 64 69 72 65 63 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 4c 64 72 53 65 74 44 | edirectionCallback.__imp_LdrSetD |
| 1c8c0 | 6c 6c 4d 61 6e 69 66 65 73 74 50 72 6f 62 65 72 00 5f 5f 69 6d 70 5f 4c 64 72 53 68 75 74 64 6f | llManifestProber.__imp_LdrShutdo |
| 1c8e0 | 77 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4c 64 72 53 68 75 74 64 6f 77 6e 54 68 72 65 61 | wnProcess.__imp_LdrShutdownThrea |
| 1c900 | 64 00 5f 5f 69 6d 70 5f 4c 64 72 55 6e 6c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 | d.__imp_LdrUnloadAlternateResour |
| 1c920 | 63 65 4d 6f 64 75 6c 65 00 5f 5f 69 6d 70 5f 4c 64 72 55 6e 6c 6f 61 64 44 6c 6c 00 5f 5f 69 6d | ceModule.__imp_LdrUnloadDll.__im |
| 1c940 | 70 5f 4c 64 72 55 6e 6c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 00 5f 5f 69 6d 70 5f 4c 64 72 56 | p_LdrUnlockLoaderLock.__imp_LdrV |
| 1c960 | 65 72 69 66 79 49 6d 61 67 65 4d 61 74 63 68 65 73 43 68 65 63 6b 73 75 6d 00 5f 5f 69 6d 70 5f | erifyImageMatchesChecksum.__imp_ |
| 1c980 | 4e 6c 73 41 6e 73 69 43 6f 64 65 50 61 67 65 00 5f 5f 69 6d 70 5f 4e 6c 73 4d 62 43 6f 64 65 50 | NlsAnsiCodePage.__imp_NlsMbCodeP |
| 1c9a0 | 61 67 65 54 61 67 00 5f 5f 69 6d 70 5f 4e 6c 73 4d 62 4f 65 6d 43 6f 64 65 50 61 67 65 54 61 67 | ageTag.__imp_NlsMbOemCodePageTag |
| 1c9c0 | 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 70 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 | .__imp_NtAcceptConnectPort.__imp |
| 1c9e0 | 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 65 | _NtAccessCheck.__imp_NtAccessChe |
| 1ca00 | 63 6b 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 | ckAndAuditAlarm.__imp_NtAccessCh |
| 1ca20 | 65 63 6b 42 79 54 79 70 65 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 | eckByType.__imp_NtAccessCheckByT |
| 1ca40 | 79 70 65 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 | ypeAndAuditAlarm.__imp_NtAccessC |
| 1ca60 | 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 | heckByTypeResultList.__imp_NtAcc |
| 1ca80 | 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 | essCheckByTypeResultListAndAudit |
| 1caa0 | 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 | Alarm.__imp_NtAccessCheckByTypeR |
| 1cac0 | 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 00 5f | esultListAndAuditAlarmByHandle._ |
| 1cae0 | 5f 69 6d 70 5f 4e 74 41 64 64 41 74 6f 6d 00 5f 5f 69 6d 70 5f 4e 74 41 64 64 42 6f 6f 74 45 6e | _imp_NtAddAtom.__imp_NtAddBootEn |
| 1cb00 | 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 41 64 64 44 72 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 | try.__imp_NtAddDriverEntry.__imp |
| 1cb20 | 5f 4e 74 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 41 64 6a | _NtAdjustGroupsToken.__imp_NtAdj |
| 1cb40 | 75 73 74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 41 6c 65 72 74 | ustPrivilegesToken.__imp_NtAlert |
| 1cb60 | 52 65 73 75 6d 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 41 6c 65 72 74 54 68 72 65 61 64 | ResumeThread.__imp_NtAlertThread |
| 1cb80 | 00 5f 5f 69 6d 70 5f 4e 74 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 | .__imp_NtAllocateLocallyUniqueId |
| 1cba0 | 00 5f 5f 69 6d 70 5f 4e 74 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 | .__imp_NtAllocateUserPhysicalPag |
| 1cbc0 | 65 73 00 5f 5f 69 6d 70 5f 4e 74 41 6c 6c 6f 63 61 74 65 55 75 69 64 73 00 5f 5f 69 6d 70 5f 4e | es.__imp_NtAllocateUuids.__imp_N |
| 1cbe0 | 74 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 41 | tAllocateVirtualMemory.__imp_NtA |
| 1cc00 | 70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 4e 74 41 72 65 4d 61 | pphelpCacheControl.__imp_NtAreMa |
| 1cc20 | 70 70 65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 00 5f 5f 69 6d 70 5f 4e 74 41 73 73 69 67 6e 50 | ppedFilesTheSame.__imp_NtAssignP |
| 1cc40 | 72 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 43 61 6c 6c 62 61 | rocessToJobObject.__imp_NtCallba |
| 1cc60 | 63 6b 52 65 74 75 72 6e 00 5f 5f 69 6d 70 5f 4e 74 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b | ckReturn.__imp_NtCancelDeviceWak |
| 1cc80 | 65 75 70 52 65 71 75 65 73 74 00 5f 5f 69 6d 70 5f 4e 74 43 61 6e 63 65 6c 49 6f 46 69 6c 65 00 | eupRequest.__imp_NtCancelIoFile. |
| 1cca0 | 5f 5f 69 6d 70 5f 4e 74 43 61 6e 63 65 6c 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 43 6c 65 61 | __imp_NtCancelTimer.__imp_NtClea |
| 1ccc0 | 72 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 43 6c 6f 73 65 00 5f 5f 69 6d 70 5f 4e 74 43 6c 6f | rEvent.__imp_NtClose.__imp_NtClo |
| 1cce0 | 73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6d 70 61 | seObjectAuditAlarm.__imp_NtCompa |
| 1cd00 | 63 74 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 5f 5f 69 | ctKeys.__imp_NtCompareTokens.__i |
| 1cd20 | 6d 70 5f 4e 74 43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e | mp_NtCompleteConnectPort.__imp_N |
| 1cd40 | 74 43 6f 6d 70 72 65 73 73 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6e 6e 65 63 74 50 6f 72 74 | tCompressKey.__imp_NtConnectPort |
| 1cd60 | 00 5f 5f 69 6d 70 5f 4e 74 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 | .__imp_NtContinue.__imp_NtCreate |
| 1cd80 | 44 65 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 44 69 72 65 63 74 | DebugObject.__imp_NtCreateDirect |
| 1cda0 | 6f 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 45 76 65 6e 74 00 5f 5f | oryObject.__imp_NtCreateEvent.__ |
| 1cdc0 | 69 6d 70 5f 4e 74 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 43 72 | imp_NtCreateEventPair.__imp_NtCr |
| 1cde0 | 65 61 74 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 | eateFile.__imp_NtCreateIoComplet |
| 1ce00 | 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d | ion.__imp_NtCreateJobObject.__im |
| 1ce20 | 70 5f 4e 74 43 72 65 61 74 65 4a 6f 62 53 65 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 4b | p_NtCreateJobSet.__imp_NtCreateK |
| 1ce40 | 65 79 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d | ey.__imp_NtCreateKeyedEvent.__im |
| 1ce60 | 70 5f 4e 74 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 | p_NtCreateMailslotFile.__imp_NtC |
| 1ce80 | 72 65 61 74 65 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 4e 61 6d 65 64 50 | reateMutant.__imp_NtCreateNamedP |
| 1cea0 | 69 70 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 50 61 67 69 6e 67 46 69 6c 65 | ipeFile.__imp_NtCreatePagingFile |
| 1cec0 | 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 | .__imp_NtCreatePort.__imp_NtCrea |
| 1cee0 | 74 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 | teProcess.__imp_NtCreateProcessE |
| 1cf00 | 78 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 | x.__imp_NtCreateProfile.__imp_Nt |
| 1cf20 | 43 72 65 61 74 65 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 53 65 6d 61 | CreateSection.__imp_NtCreateSema |
| 1cf40 | 70 68 6f 72 65 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b | phore.__imp_NtCreateSymbolicLink |
| 1cf60 | 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d | Object.__imp_NtCreateThread.__im |
| 1cf80 | 70 5f 4e 74 43 72 65 61 74 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 54 6f | p_NtCreateTimer.__imp_NtCreateTo |
| 1cfa0 | 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f 72 74 00 5f | ken.__imp_NtCreateWaitablePort._ |
| 1cfc0 | 5f 69 6d 70 5f 4e 74 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f | _imp_NtDebugActiveProcess.__imp_ |
| 1cfe0 | 4e 74 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 4e 74 44 65 6c 61 79 45 78 65 | NtDebugContinue.__imp_NtDelayExe |
| 1d000 | 63 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 41 74 6f 6d 00 5f 5f 69 6d 70 5f | cution.__imp_NtDeleteAtom.__imp_ |
| 1d020 | 4e 74 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 | NtDeleteBootEntry.__imp_NtDelete |
| 1d040 | 44 72 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 46 69 6c 65 00 5f | DriverEntry.__imp_NtDeleteFile._ |
| 1d060 | 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 4f | _imp_NtDeleteKey.__imp_NtDeleteO |
| 1d080 | 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 44 65 6c 65 74 65 56 61 | bjectAuditAlarm.__imp_NtDeleteVa |
| 1d0a0 | 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 44 65 76 69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 | lueKey.__imp_NtDeviceIoControlFi |
| 1d0c0 | 6c 65 00 5f 5f 69 6d 70 5f 4e 74 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 4e | le.__imp_NtDisplayString.__imp_N |
| 1d0e0 | 74 44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 44 75 70 6c 69 63 61 | tDuplicateObject.__imp_NtDuplica |
| 1d100 | 74 65 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 | teToken.__imp_NtEnumerateBootEnt |
| 1d120 | 72 69 65 73 00 5f 5f 69 6d 70 5f 4e 74 45 6e 75 6d 65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 | ries.__imp_NtEnumerateDriverEntr |
| 1d140 | 69 65 73 00 5f 5f 69 6d 70 5f 4e 74 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e | ies.__imp_NtEnumerateKey.__imp_N |
| 1d160 | 74 45 6e 75 6d 65 72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 | tEnumerateSystemEnvironmentValue |
| 1d180 | 73 45 78 00 5f 5f 69 6d 70 5f 4e 74 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b 65 79 00 5f 5f | sEx.__imp_NtEnumerateValueKey.__ |
| 1d1a0 | 69 6d 70 5f 4e 74 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 46 69 6c 74 | imp_NtExtendSection.__imp_NtFilt |
| 1d1c0 | 65 72 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 46 69 6e 64 41 74 6f 6d 00 5f 5f 69 6d 70 5f 4e | erToken.__imp_NtFindAtom.__imp_N |
| 1d1e0 | 74 46 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 46 6c 75 73 68 49 | tFlushBuffersFile.__imp_NtFlushI |
| 1d200 | 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 5f 5f 69 6d 70 5f 4e 74 46 6c 75 73 68 4b 65 79 | nstructionCache.__imp_NtFlushKey |
| 1d220 | 00 5f 5f 69 6d 70 5f 4e 74 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d | .__imp_NtFlushVirtualMemory.__im |
| 1d240 | 70 5f 4e 74 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 4e 74 46 72 65 | p_NtFlushWriteBuffer.__imp_NtFre |
| 1d260 | 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 5f 4e 74 46 72 65 65 56 | eUserPhysicalPages.__imp_NtFreeV |
| 1d280 | 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 46 73 43 6f 6e 74 72 6f 6c 46 69 | irtualMemory.__imp_NtFsControlFi |
| 1d2a0 | 6c 65 00 5f 5f 69 6d 70 5f 4e 74 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 5f 5f 69 6d | le.__imp_NtGetContextThread.__im |
| 1d2c0 | 70 5f 4e 74 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 5f 5f | p_NtGetCurrentProcessorNumber.__ |
| 1d2e0 | 69 6d 70 5f 4e 74 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f | imp_NtGetDevicePowerState.__imp_ |
| 1d300 | 4e 74 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 47 65 74 54 69 | NtGetPlugPlayEvent.__imp_NtGetTi |
| 1d320 | 63 6b 43 6f 75 6e 74 00 5f 5f 69 6d 70 5f 4e 74 47 65 74 57 72 69 74 65 57 61 74 63 68 00 5f 5f | ckCount.__imp_NtGetWriteWatch.__ |
| 1d340 | 69 6d 70 5f 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 00 | imp_NtImpersonateAnonymousToken. |
| 1d360 | 5f 5f 69 6d 70 5f 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 00 | __imp_NtImpersonateClientOfPort. |
| 1d380 | 5f 5f 69 6d 70 5f 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f | __imp_NtImpersonateThread.__imp_ |
| 1d3a0 | 4e 74 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 49 6e 69 | NtInitializeRegistry.__imp_NtIni |
| 1d3c0 | 74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 49 73 50 72 6f 63 65 | tiatePowerAction.__imp_NtIsProce |
| 1d3e0 | 73 73 49 6e 4a 6f 62 00 5f 5f 69 6d 70 5f 4e 74 49 73 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 | ssInJob.__imp_NtIsSystemResumeAu |
| 1d400 | 74 6f 6d 61 74 69 63 00 5f 5f 69 6d 70 5f 4e 74 4c 69 73 74 65 6e 50 6f 72 74 00 5f 5f 69 6d 70 | tomatic.__imp_NtListenPort.__imp |
| 1d420 | 5f 4e 74 4c 6f 61 64 44 72 69 76 65 72 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 61 64 4b 65 79 00 5f 5f | _NtLoadDriver.__imp_NtLoadKey.__ |
| 1d440 | 69 6d 70 5f 4e 74 4c 6f 61 64 4b 65 79 32 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 61 64 4b 65 79 45 78 | imp_NtLoadKey2.__imp_NtLoadKeyEx |
| 1d460 | 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b 50 72 | .__imp_NtLockFile.__imp_NtLockPr |
| 1d480 | 6f 64 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b | oductActivationKeys.__imp_NtLock |
| 1d4a0 | 52 65 67 69 73 74 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 4c 6f 63 6b 56 69 72 74 75 61 6c 4d | RegistryKey.__imp_NtLockVirtualM |
| 1d4c0 | 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 | emory.__imp_NtMakePermanentObjec |
| 1d4e0 | 74 00 5f 5f 69 6d 70 5f 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4f 62 6a 65 63 74 00 5f 5f | t.__imp_NtMakeTemporaryObject.__ |
| 1d500 | 69 6d 70 5f 4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 | imp_NtMapUserPhysicalPages.__imp |
| 1d520 | 5f 4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74 65 72 00 5f | _NtMapUserPhysicalPagesScatter._ |
| 1d540 | 5f 69 6d 70 5f 4e 74 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 | _imp_NtMapViewOfSection.__imp_Nt |
| 1d560 | 4d 6f 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 4d 6f 64 69 66 79 44 72 | ModifyBootEntry.__imp_NtModifyDr |
| 1d580 | 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 44 69 | iverEntry.__imp_NtNotifyChangeDi |
| 1d5a0 | 72 65 63 74 6f 72 79 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 | rectoryFile.__imp_NtNotifyChange |
| 1d5c0 | 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69 70 6c 65 | Key.__imp_NtNotifyChangeMultiple |
| 1d5e0 | 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 | Keys.__imp_NtOpenDirectoryObject |
| 1d600 | 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 45 | .__imp_NtOpenEvent.__imp_NtOpenE |
| 1d620 | 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f | ventPair.__imp_NtOpenFile.__imp_ |
| 1d640 | 4e 74 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 4a | NtOpenIoCompletion.__imp_NtOpenJ |
| 1d660 | 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 4b 65 79 00 5f 5f 69 6d 70 5f 4e | obObject.__imp_NtOpenKey.__imp_N |
| 1d680 | 74 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 4d 75 74 61 | tOpenKeyedEvent.__imp_NtOpenMuta |
| 1d6a0 | 6e 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 | nt.__imp_NtOpenObjectAuditAlarm. |
| 1d6c0 | 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e | __imp_NtOpenProcess.__imp_NtOpen |
| 1d6e0 | 50 72 6f 63 65 73 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 | ProcessToken.__imp_NtOpenProcess |
| 1d700 | 54 6f 6b 65 6e 45 78 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 53 65 63 74 69 6f 6e 00 5f 5f 69 6d | TokenEx.__imp_NtOpenSection.__im |
| 1d720 | 70 5f 4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 53 79 | p_NtOpenSemaphore.__imp_NtOpenSy |
| 1d740 | 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 54 68 72 | mbolicLinkObject.__imp_NtOpenThr |
| 1d760 | 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 00 5f 5f 69 6d | ead.__imp_NtOpenThreadToken.__im |
| 1d780 | 70 5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 45 78 00 5f 5f 69 6d 70 5f 4e 74 4f 70 | p_NtOpenThreadTokenEx.__imp_NtOp |
| 1d7a0 | 65 6e 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c 00 | enTimer.__imp_NtPlugPlayControl. |
| 1d7c0 | 5f 5f 69 6d 70 5f 4e 74 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e | __imp_NtPowerInformation.__imp_N |
| 1d7e0 | 74 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 00 5f 5f 69 6d 70 5f 4e 74 50 72 69 76 69 6c 65 67 | tPrivilegeCheck.__imp_NtPrivileg |
| 1d800 | 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 50 72 69 76 69 6c | eObjectAuditAlarm.__imp_NtPrivil |
| 1d820 | 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 4e 74 50 72 | egedServiceAuditAlarm.__imp_NtPr |
| 1d840 | 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 50 75 6c 73 65 | otectVirtualMemory.__imp_NtPulse |
| 1d860 | 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46 69 6c | Event.__imp_NtQueryAttributesFil |
| 1d880 | 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f | e.__imp_NtQueryBootEntryOrder.__ |
| 1d8a0 | 69 6d 70 5f 4e 74 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 4e 74 51 | imp_NtQueryBootOptions.__imp_NtQ |
| 1d8c0 | 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 | ueryDebugFilterState.__imp_NtQue |
| 1d8e0 | 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 44 65 66 | ryDefaultLocale.__imp_NtQueryDef |
| 1d900 | 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 44 69 72 65 | aultUILanguage.__imp_NtQueryDire |
| 1d920 | 63 74 6f 72 79 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 | ctoryFile.__imp_NtQueryDirectory |
| 1d940 | 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 44 72 69 76 65 72 45 6e 74 72 79 4f | Object.__imp_NtQueryDriverEntryO |
| 1d960 | 72 64 65 72 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 45 61 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e | rder.__imp_NtQueryEaFile.__imp_N |
| 1d980 | 74 51 75 65 72 79 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 46 75 6c 6c 41 74 74 | tQueryEvent.__imp_NtQueryFullAtt |
| 1d9a0 | 72 69 62 75 74 65 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 | ributesFile.__imp_NtQueryInforma |
| 1d9c0 | 74 69 6f 6e 41 74 6f 6d 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f | tionAtom.__imp_NtQueryInformatio |
| 1d9e0 | 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f | nFile.__imp_NtQueryInformationJo |
| 1da00 | 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e | bObject.__imp_NtQueryInformation |
| 1da20 | 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f | Port.__imp_NtQueryInformationPro |
| 1da40 | 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 | cess.__imp_NtQueryInformationThr |
| 1da60 | 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 | ead.__imp_NtQueryInformationToke |
| 1da80 | 6e 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 | n.__imp_NtQueryInstallUILanguage |
| 1daa0 | 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 5f 5f | .__imp_NtQueryIntervalProfile.__ |
| 1dac0 | 69 6d 70 5f 4e 74 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 | imp_NtQueryIoCompletion.__imp_Nt |
| 1dae0 | 51 75 65 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4d 75 6c 74 69 70 6c 65 56 61 | QueryKey.__imp_NtQueryMultipleVa |
| 1db00 | 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 | lueKey.__imp_NtQueryMutant.__imp |
| 1db20 | 5f 4e 74 51 75 65 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4f 70 65 6e | _NtQueryObject.__imp_NtQueryOpen |
| 1db40 | 53 75 62 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 | SubKeys.__imp_NtQueryOpenSubKeys |
| 1db60 | 45 78 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 50 65 72 66 6f 72 6d 61 6e 63 65 43 6f 75 6e 74 | Ex.__imp_NtQueryPerformanceCount |
| 1db80 | 65 72 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 | er.__imp_NtQueryPortInformationP |
| 1dba0 | 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 | rocess.__imp_NtQueryQuotaInforma |
| 1dbc0 | 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 65 63 74 69 6f 6e 00 5f 5f | tionFile.__imp_NtQuerySection.__ |
| 1dbe0 | 69 6d 70 5f 4e 74 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f | imp_NtQuerySecurityObject.__imp_ |
| 1dc00 | 4e 74 51 75 65 72 79 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 79 | NtQuerySemaphore.__imp_NtQuerySy |
| 1dc20 | 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 53 79 | mbolicLinkObject.__imp_NtQuerySy |
| 1dc40 | 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 | stemEnvironmentValue.__imp_NtQue |
| 1dc60 | 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5f 5f 69 6d 70 | rySystemEnvironmentValueEx.__imp |
| 1dc80 | 5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f | _NtQuerySystemInformation.__imp_ |
| 1dca0 | 4e 74 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 54 | NtQuerySystemTime.__imp_NtQueryT |
| 1dcc0 | 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f | imer.__imp_NtQueryTimerResolutio |
| 1dce0 | 6e 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 | n.__imp_NtQueryValueKey.__imp_Nt |
| 1dd00 | 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 51 75 65 72 79 | QueryVirtualMemory.__imp_NtQuery |
| 1dd20 | 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 51 75 | VolumeInformationFile.__imp_NtQu |
| 1dd40 | 65 75 65 41 70 63 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 52 61 69 73 65 45 78 63 65 70 74 | eueApcThread.__imp_NtRaiseExcept |
| 1dd60 | 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 52 61 69 73 65 48 61 72 64 45 72 72 6f 72 00 5f 5f 69 6d 70 | ion.__imp_NtRaiseHardError.__imp |
| 1dd80 | 5f 4e 74 52 65 61 64 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 52 65 61 64 46 69 6c 65 53 63 61 74 | _NtReadFile.__imp_NtReadFileScat |
| 1dda0 | 74 65 72 00 5f 5f 69 6d 70 5f 4e 74 52 65 61 64 52 65 71 75 65 73 74 44 61 74 61 00 5f 5f 69 6d | ter.__imp_NtReadRequestData.__im |
| 1ddc0 | 70 5f 4e 74 52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 | p_NtReadVirtualMemory.__imp_NtRe |
| 1dde0 | 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f 72 74 00 5f 5f 69 6d 70 5f | gisterThreadTerminatePort.__imp_ |
| 1de00 | 4e 74 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 6c 65 | NtReleaseKeyedEvent.__imp_NtRele |
| 1de20 | 61 73 65 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 6c 65 61 73 65 53 65 6d 61 70 68 6f | aseMutant.__imp_NtReleaseSemapho |
| 1de40 | 72 65 00 5f 5f 69 6d 70 5f 4e 74 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f | re.__imp_NtRemoveIoCompletion.__ |
| 1de60 | 69 6d 70 5f 4e 74 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75 67 00 5f 5f 69 6d 70 5f 4e | imp_NtRemoveProcessDebug.__imp_N |
| 1de80 | 74 52 65 6e 61 6d 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 70 6c 61 63 65 4b 65 79 00 5f 5f | tRenameKey.__imp_NtReplaceKey.__ |
| 1dea0 | 69 6d 70 5f 4e 74 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 70 6c 79 57 61 69 | imp_NtReplyPort.__imp_NtReplyWai |
| 1dec0 | 74 52 65 63 65 69 76 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 70 6c 79 57 61 69 74 52 65 | tReceivePort.__imp_NtReplyWaitRe |
| 1dee0 | 63 65 69 76 65 50 6f 72 74 45 78 00 5f 5f 69 6d 70 5f 4e 74 52 65 70 6c 79 57 61 69 74 52 65 70 | ceivePortEx.__imp_NtReplyWaitRep |
| 1df00 | 6c 79 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b 65 | lyPort.__imp_NtRequestDeviceWake |
| 1df20 | 75 70 00 5f 5f 69 6d 70 5f 4e 74 52 65 71 75 65 73 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 | up.__imp_NtRequestPort.__imp_NtR |
| 1df40 | 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 71 75 | equestWaitReplyPort.__imp_NtRequ |
| 1df60 | 65 73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 73 65 74 45 76 | estWakeupLatency.__imp_NtResetEv |
| 1df80 | 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68 00 5f 5f 69 6d | ent.__imp_NtResetWriteWatch.__im |
| 1dfa0 | 70 5f 4e 74 52 65 73 74 6f 72 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 52 65 73 75 6d 65 50 72 6f | p_NtRestoreKey.__imp_NtResumePro |
| 1dfc0 | 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 52 65 73 75 6d 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f | cess.__imp_NtResumeThread.__imp_ |
| 1dfe0 | 4e 74 53 61 76 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 53 61 76 65 4b 65 79 45 78 00 5f 5f 69 6d | NtSaveKey.__imp_NtSaveKeyEx.__im |
| 1e000 | 70 5f 4e 74 53 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 5f 5f 69 6d 70 5f 4e 74 53 65 63 75 72 | p_NtSaveMergedKeys.__imp_NtSecur |
| 1e020 | 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 42 6f 6f 74 45 6e 74 72 | eConnectPort.__imp_NtSetBootEntr |
| 1e040 | 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 5f 5f | yOrder.__imp_NtSetBootOptions.__ |
| 1e060 | 69 6d 70 5f 4e 74 53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 53 | imp_NtSetContextThread.__imp_NtS |
| 1e080 | 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 65 | etDebugFilterState.__imp_NtSetDe |
| 1e0a0 | 66 61 75 6c 74 48 61 72 64 45 72 72 6f 72 50 6f 72 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 65 | faultHardErrorPort.__imp_NtSetDe |
| 1e0c0 | 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 65 66 61 75 6c 74 55 49 | faultLocale.__imp_NtSetDefaultUI |
| 1e0e0 | 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 44 72 69 76 65 72 45 6e 74 72 79 4f | Language.__imp_NtSetDriverEntryO |
| 1e100 | 72 64 65 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 45 61 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 | rder.__imp_NtSetEaFile.__imp_NtS |
| 1e120 | 65 74 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 | etEvent.__imp_NtSetEventBoostPri |
| 1e140 | 6f 72 69 74 79 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5f | ority.__imp_NtSetHighEventPair._ |
| 1e160 | 5f 69 6d 70 5f 4e 74 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f | _imp_NtSetHighWaitLowEventPair._ |
| 1e180 | 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 | _imp_NtSetInformationDebugObject |
| 1e1a0 | 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d | .__imp_NtSetInformationFile.__im |
| 1e1c0 | 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d | p_NtSetInformationJobObject.__im |
| 1e1e0 | 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 53 65 | p_NtSetInformationKey.__imp_NtSe |
| 1e200 | 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e | tInformationObject.__imp_NtSetIn |
| 1e220 | 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f | formationProcess.__imp_NtSetInfo |
| 1e240 | 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 | rmationThread.__imp_NtSetInforma |
| 1e260 | 74 69 6f 6e 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f | tionToken.__imp_NtSetIntervalPro |
| 1e280 | 66 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 | file.__imp_NtSetIoCompletion.__i |
| 1e2a0 | 6d 70 5f 4e 74 53 65 74 4c 64 74 45 6e 74 72 69 65 73 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 4c 6f | mp_NtSetLdtEntries.__imp_NtSetLo |
| 1e2c0 | 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 4c 6f 77 57 61 69 74 48 69 67 | wEventPair.__imp_NtSetLowWaitHig |
| 1e2e0 | 68 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 | hEventPair.__imp_NtSetQuotaInfor |
| 1e300 | 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 65 63 75 72 69 74 79 4f 62 | mationFile.__imp_NtSetSecurityOb |
| 1e320 | 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e | ject.__imp_NtSetSystemEnvironmen |
| 1e340 | 74 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d | tValue.__imp_NtSetSystemEnvironm |
| 1e360 | 65 6e 74 56 61 6c 75 65 45 78 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 49 6e 66 6f | entValueEx.__imp_NtSetSystemInfo |
| 1e380 | 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 53 74 | rmation.__imp_NtSetSystemPowerSt |
| 1e3a0 | 61 74 65 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d 70 5f | ate.__imp_NtSetSystemTime.__imp_ |
| 1e3c0 | 4e 74 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 61 74 65 00 5f 5f 69 6d 70 5f | NtSetThreadExecutionState.__imp_ |
| 1e3e0 | 4e 74 53 65 74 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 54 69 6d 65 72 52 65 73 6f 6c | NtSetTimer.__imp_NtSetTimerResol |
| 1e400 | 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 55 75 69 64 53 65 65 64 00 5f 5f 69 6d 70 5f | ution.__imp_NtSetUuidSeed.__imp_ |
| 1e420 | 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 53 65 74 56 6f 6c 75 6d 65 49 | NtSetValueKey.__imp_NtSetVolumeI |
| 1e440 | 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 68 75 74 64 6f 77 6e 53 | nformationFile.__imp_NtShutdownS |
| 1e460 | 79 73 74 65 6d 00 5f 5f 69 6d 70 5f 4e 74 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53 69 | ystem.__imp_NtSignalAndWaitForSi |
| 1e480 | 6e 67 6c 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 53 74 61 72 74 50 72 6f 66 69 6c 65 00 | ngleObject.__imp_NtStartProfile. |
| 1e4a0 | 5f 5f 69 6d 70 5f 4e 74 53 74 6f 70 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 53 75 73 70 | __imp_NtStopProfile.__imp_NtSusp |
| 1e4c0 | 65 6e 64 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 53 75 73 70 65 6e 64 54 68 72 65 61 64 | endProcess.__imp_NtSuspendThread |
| 1e4e0 | 00 5f 5f 69 6d 70 5f 4e 74 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d | .__imp_NtSystemDebugControl.__im |
| 1e500 | 70 5f 4e 74 54 65 72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 4e 74 54 | p_NtTerminateJobObject.__imp_NtT |
| 1e520 | 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 4e 74 54 65 72 6d 69 6e 61 74 | erminateProcess.__imp_NtTerminat |
| 1e540 | 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 4e 74 54 65 73 74 41 6c 65 72 74 00 5f 5f 69 6d 70 5f | eThread.__imp_NtTestAlert.__imp_ |
| 1e560 | 4e 74 54 72 61 63 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 54 72 61 6e 73 6c 61 74 65 46 69 | NtTraceEvent.__imp_NtTranslateFi |
| 1e580 | 6c 65 50 61 74 68 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 61 64 44 72 69 76 65 72 00 5f 5f 69 6d | lePath.__imp_NtUnloadDriver.__im |
| 1e5a0 | 70 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 32 | p_NtUnloadKey.__imp_NtUnloadKey2 |
| 1e5c0 | 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c | .__imp_NtUnloadKeyEx.__imp_NtUnl |
| 1e5e0 | 6f 63 6b 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d | ockFile.__imp_NtUnlockVirtualMem |
| 1e600 | 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 55 6e 6d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 00 5f | ory.__imp_NtUnmapViewOfSection._ |
| 1e620 | 5f 69 6d 70 5f 4e 74 56 64 6d 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f | _imp_NtVdmControl.__imp_NtWaitFo |
| 1e640 | 72 44 65 62 75 67 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 4b 65 79 65 64 | rDebugEvent.__imp_NtWaitForKeyed |
| 1e660 | 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a | Event.__imp_NtWaitForMultipleObj |
| 1e680 | 65 63 74 73 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 | ects.__imp_NtWaitForMultipleObje |
| 1e6a0 | 63 74 73 33 32 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 | cts32.__imp_NtWaitForSingleObjec |
| 1e6c0 | 74 00 5f 5f 69 6d 70 5f 4e 74 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d | t.__imp_NtWaitHighEventPair.__im |
| 1e6e0 | 70 5f 4e 74 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 4e 74 57 72 69 | p_NtWaitLowEventPair.__imp_NtWri |
| 1e700 | 74 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 4e 74 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 5f | teFile.__imp_NtWriteFileGather._ |
| 1e720 | 5f 69 6d 70 5f 4e 74 57 72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 00 5f 5f 69 6d 70 5f 4e 74 | _imp_NtWriteRequestData.__imp_Nt |
| 1e740 | 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 4e 74 59 69 65 6c 64 | WriteVirtualMemory.__imp_NtYield |
| 1e760 | 45 78 65 63 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 50 66 78 46 69 6e 64 50 72 65 66 69 78 00 5f 5f | Execution.__imp_PfxFindPrefix.__ |
| 1e780 | 69 6d 70 5f 50 66 78 49 6e 69 74 69 61 6c 69 7a 65 00 5f 5f 69 6d 70 5f 50 66 78 49 6e 73 65 72 | imp_PfxInitialize.__imp_PfxInser |
| 1e7a0 | 74 50 72 65 66 69 78 00 5f 5f 69 6d 70 5f 50 66 78 52 65 6d 6f 76 65 50 72 65 66 69 78 00 5f 5f | tPrefix.__imp_PfxRemovePrefix.__ |
| 1e7c0 | 69 6d 70 5f 52 74 6c 41 62 6f 72 74 52 58 61 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 62 73 6f 6c | imp_RtlAbortRXact.__imp_RtlAbsol |
| 1e7e0 | 75 74 65 54 6f 53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 71 | uteToSelfRelativeSD.__imp_RtlAcq |
| 1e800 | 75 69 72 65 50 65 62 4c 6f 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 71 75 69 72 65 50 72 69 76 | uirePebLock.__imp_RtlAcquirePriv |
| 1e820 | 69 6c 65 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 71 75 69 72 65 52 65 73 6f 75 72 63 65 45 78 | ilege.__imp_RtlAcquireResourceEx |
| 1e840 | 63 6c 75 73 69 76 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 71 75 69 72 65 52 65 73 6f 75 72 63 65 | clusive.__imp_RtlAcquireResource |
| 1e860 | 53 68 61 72 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 | Shared.__imp_RtlActivateActivati |
| 1e880 | 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 | onContext.__imp_RtlActivateActiv |
| 1e8a0 | 61 74 69 6f 6e 43 6f 6e 74 65 78 74 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 41 63 74 69 76 61 74 65 | ationContextEx.__imp_RtlActivate |
| 1e8c0 | 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 00 5f 5f 69 6d | ActivationContextUnsafeFast.__im |
| 1e8e0 | 70 5f 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 41 63 65 00 5f 5f 69 6d 70 5f 52 | p_RtlAddAccessAllowedAce.__imp_R |
| 1e900 | 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 41 63 65 45 78 00 5f 5f 69 6d 70 5f 52 74 | tlAddAccessAllowedAceEx.__imp_Rt |
| 1e920 | 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 4f 62 6a 65 63 74 41 63 65 00 5f 5f 69 6d 70 | lAddAccessAllowedObjectAce.__imp |
| 1e940 | 5f 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c | _RtlAddAccessDeniedAce.__imp_Rtl |
| 1e960 | 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 | AddAccessDeniedAceEx.__imp_RtlAd |
| 1e980 | 64 41 63 63 65 73 73 44 65 6e 69 65 64 4f 62 6a 65 63 74 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c | dAccessDeniedObjectAce.__imp_Rtl |
| 1e9a0 | 41 64 64 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 63 74 69 6f 6e 54 6f 52 58 61 63 74 | AddAce.__imp_RtlAddActionToRXact |
| 1e9c0 | 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 | .__imp_RtlAddAtomToAtomTable.__i |
| 1e9e0 | 6d 70 5f 52 74 6c 41 64 64 41 74 74 72 69 62 75 74 65 41 63 74 69 6f 6e 54 6f 52 58 61 63 74 00 | mp_RtlAddAttributeActionToRXact. |
| 1ea00 | 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 41 63 65 00 5f 5f 69 6d 70 | __imp_RtlAddAuditAccessAce.__imp |
| 1ea20 | 5f 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 41 63 65 45 78 00 5f 5f 69 6d 70 5f 52 74 | _RtlAddAuditAccessAceEx.__imp_Rt |
| 1ea40 | 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 4f 62 6a 65 63 74 41 63 65 00 5f 5f 69 6d 70 5f 52 | lAddAuditAccessObjectAce.__imp_R |
| 1ea60 | 74 6c 41 64 64 43 6f 6d 70 6f 75 6e 64 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 46 75 6e | tlAddCompoundAce.__imp_RtlAddFun |
| 1ea80 | 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 52 65 66 41 63 74 69 76 61 | ctionTable.__imp_RtlAddRefActiva |
| 1eaa0 | 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 52 65 66 4d 65 6d 6f 72 | tionContext.__imp_RtlAddRefMemor |
| 1eac0 | 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64 43 6f 6e 74 | yStream.__imp_RtlAddVectoredCont |
| 1eae0 | 69 6e 75 65 48 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64 | inueHandler.__imp_RtlAddVectored |
| 1eb00 | 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 64 72 65 73 | ExceptionHandler.__imp_RtlAddres |
| 1eb20 | 73 49 6e 53 65 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 64 6a 75 73 74 50 | sInSectionTable.__imp_RtlAdjustP |
| 1eb40 | 72 69 76 69 6c 65 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 41 63 74 69 76 61 | rivilege.__imp_RtlAllocateActiva |
| 1eb60 | 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 41 6c 6c 6f 63 61 | tionContextStack.__imp_RtlAlloca |
| 1eb80 | 74 65 41 6e 64 49 6e 69 74 69 61 6c 69 7a 65 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 41 6c 6c 6f | teAndInitializeSid.__imp_RtlAllo |
| 1eba0 | 63 61 74 65 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 48 65 61 70 | cateHandle.__imp_RtlAllocateHeap |
| 1ebc0 | 00 5f 5f 69 6d 70 5f 52 74 6c 41 6e 73 69 43 68 61 72 54 6f 55 6e 69 63 6f 64 65 43 68 61 72 00 | .__imp_RtlAnsiCharToUnicodeChar. |
| 1ebe0 | 5f 5f 69 6d 70 5f 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 | __imp_RtlAnsiStringToUnicodeSize |
| 1ec00 | 00 5f 5f 69 6d 70 5f 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 74 72 | .__imp_RtlAnsiStringToUnicodeStr |
| 1ec20 | 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 65 6e 64 41 73 63 69 69 7a 54 6f 53 74 72 69 6e | ing.__imp_RtlAppendAsciizToStrin |
| 1ec40 | 67 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 65 6e 64 50 61 74 68 45 6c 65 6d 65 6e 74 00 5f 5f 69 | g.__imp_RtlAppendPathElement.__i |
| 1ec60 | 6d 70 5f 52 74 6c 41 70 70 65 6e 64 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 5f 5f 69 6d 70 | mp_RtlAppendStringToString.__imp |
| 1ec80 | 5f 52 74 6c 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 | _RtlAppendUnicodeStringToString. |
| 1eca0 | 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 54 6f 53 74 72 69 6e 67 00 5f | __imp_RtlAppendUnicodeToString._ |
| 1ecc0 | 5f 69 6d 70 5f 52 74 6c 41 70 70 6c 69 63 61 74 69 6f 6e 56 65 72 69 66 69 65 72 53 74 6f 70 00 | _imp_RtlApplicationVerifierStop. |
| 1ece0 | 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 6c 79 52 58 61 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 41 70 70 | __imp_RtlApplyRXact.__imp_RtlApp |
| 1ed00 | 6c 79 52 58 61 63 74 4e 6f 46 6c 75 73 68 00 5f 5f 69 6d 70 5f 52 74 6c 41 72 65 41 6c 6c 41 63 | lyRXactNoFlush.__imp_RtlAreAllAc |
| 1ed20 | 63 65 73 73 65 73 47 72 61 6e 74 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 41 72 65 41 6e 79 41 63 63 | cessesGranted.__imp_RtlAreAnyAcc |
| 1ed40 | 65 73 73 65 73 47 72 61 6e 74 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 41 72 65 42 69 74 73 43 6c 65 | essesGranted.__imp_RtlAreBitsCle |
| 1ed60 | 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 41 72 65 42 69 74 73 53 65 74 00 5f 5f 69 6d 70 5f 52 74 6c | ar.__imp_RtlAreBitsSet.__imp_Rtl |
| 1ed80 | 41 73 73 65 72 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 61 6e 63 65 6c 54 69 6d 65 72 00 5f 5f 69 6d | Assert.__imp_RtlCancelTimer.__im |
| 1eda0 | 70 5f 52 74 6c 43 61 70 74 75 72 65 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 61 70 | p_RtlCaptureContext.__imp_RtlCap |
| 1edc0 | 74 75 72 65 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 68 61 72 | tureStackBackTrace.__imp_RtlChar |
| 1ede0 | 54 6f 49 6e 74 65 67 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 68 65 63 6b 46 6f 72 4f 72 70 68 61 | ToInteger.__imp_RtlCheckForOrpha |
| 1ee00 | 6e 65 64 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 52 74 6c 43 68 65 | nedCriticalSections.__imp_RtlChe |
| 1ee20 | 63 6b 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 5f 5f 69 6d 70 5f 52 74 6c 43 68 65 | ckProcessParameters.__imp_RtlChe |
| 1ee40 | 63 6b 52 65 67 69 73 74 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 6c 65 61 72 41 6c 6c 42 | ckRegistryKey.__imp_RtlClearAllB |
| 1ee60 | 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 43 6c 65 61 72 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c | its.__imp_RtlClearBits.__imp_Rtl |
| 1ee80 | 43 6c 6f 6e 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 6d 69 | CloneMemoryStream.__imp_RtlCommi |
| 1eea0 | 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 61 63 74 48 65 | tMemoryStream.__imp_RtlCompactHe |
| 1eec0 | 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f | ap.__imp_RtlCompareMemory.__imp_ |
| 1eee0 | 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 55 6c 6f 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 | RtlCompareMemoryUlong.__imp_RtlC |
| 1ef00 | 6f 6d 70 61 72 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 61 72 65 55 6e 69 | ompareString.__imp_RtlCompareUni |
| 1ef20 | 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 72 65 73 73 42 75 66 66 | codeString.__imp_RtlCompressBuff |
| 1ef40 | 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6d 70 75 74 65 43 72 63 33 32 00 5f 5f 69 6d 70 5f 52 | er.__imp_RtlComputeCrc32.__imp_R |
| 1ef60 | 74 6c 43 6f 6d 70 75 74 65 49 6d 70 6f 72 74 54 61 62 6c 65 48 61 73 68 00 5f 5f 69 6d 70 5f 52 | tlComputeImportTableHash.__imp_R |
| 1ef80 | 74 6c 43 6f 6d 70 75 74 65 50 72 69 76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d 65 5f 55 00 5f 5f 69 | tlComputePrivatizedDllName_U.__i |
| 1efa0 | 6d 70 5f 52 74 6c 43 6f 6e 73 6f 6c 65 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e | mp_RtlConsoleMultiByteToUnicodeN |
| 1efc0 | 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e 76 65 72 74 45 78 63 6c 75 73 69 76 65 54 6f 53 68 61 72 | .__imp_RtlConvertExclusiveToShar |
| 1efe0 | 65 64 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e 76 65 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c 75 | ed.__imp_RtlConvertSharedToExclu |
| 1f000 | 73 69 76 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e 76 65 72 74 53 69 64 54 6f 55 6e 69 63 6f 64 | sive.__imp_RtlConvertSidToUnicod |
| 1f020 | 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e 76 65 72 74 54 6f 41 75 74 6f 49 6e | eString.__imp_RtlConvertToAutoIn |
| 1f040 | 68 65 72 69 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 6e | heritSecurityObject.__imp_RtlCon |
| 1f060 | 76 65 72 74 55 69 4c 69 73 74 54 6f 41 70 69 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 | vertUiListToApiList.__imp_RtlCop |
| 1f080 | 79 4c 75 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e 64 41 74 74 72 69 62 | yLuid.__imp_RtlCopyLuidAndAttrib |
| 1f0a0 | 75 74 65 73 41 72 72 61 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 4d 61 70 70 65 64 4d 65 6d | utesArray.__imp_RtlCopyMappedMem |
| 1f0c0 | 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 | ory.__imp_RtlCopyMemory.__imp_Rt |
| 1f0e0 | 6c 43 6f 70 79 4d 65 6d 6f 72 79 4e 6f 6e 54 65 6d 70 6f 72 61 6c 00 5f 5f 69 6d 70 5f 52 74 6c | lCopyMemoryNonTemporal.__imp_Rtl |
| 1f100 | 43 6f 70 79 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 | CopyMemoryStreamTo.__imp_RtlCopy |
| 1f120 | 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f 00 5f 5f 69 6d 70 | OutOfProcessMemoryStreamTo.__imp |
| 1f140 | 5f 52 74 6c 43 6f 70 79 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 | _RtlCopySecurityDescriptor.__imp |
| 1f160 | 5f 52 74 6c 43 6f 70 79 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 53 69 64 41 6e 64 41 | _RtlCopySid.__imp_RtlCopySidAndA |
| 1f180 | 74 74 72 69 62 75 74 65 73 41 72 72 61 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 53 74 72 69 | ttributesArray.__imp_RtlCopyStri |
| 1f1a0 | 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 6f 70 79 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f | ng.__imp_RtlCopyUnicodeString.__ |
| 1f1c0 | 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 | imp_RtlCreateAcl.__imp_RtlCreate |
| 1f1e0 | 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 | ActivationContext.__imp_RtlCreat |
| 1f200 | 65 41 6e 64 53 65 74 53 44 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 41 74 6f 6d 54 61 62 | eAndSetSD.__imp_RtlCreateAtomTab |
| 1f220 | 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 | le.__imp_RtlCreateBootStatusData |
| 1f240 | 46 69 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 | File.__imp_RtlCreateEnvironment. |
| 1f260 | 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 | __imp_RtlCreateHeap.__imp_RtlCre |
| 1f280 | 61 74 65 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 | ateProcessParameters.__imp_RtlCr |
| 1f2a0 | 65 61 74 65 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 | eateQueryDebugBuffer.__imp_RtlCr |
| 1f2c0 | 65 61 74 65 52 65 67 69 73 74 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 53 | eateRegistryKey.__imp_RtlCreateS |
| 1f2e0 | 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 | ecurityDescriptor.__imp_RtlCreat |
| 1f300 | 65 53 79 73 74 65 6d 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 6f 6c 64 65 72 00 5f | eSystemVolumeInformationFolder._ |
| 1f320 | 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 54 61 67 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 43 | _imp_RtlCreateTagHeap.__imp_RtlC |
| 1f340 | 72 65 61 74 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 51 | reateTimer.__imp_RtlCreateTimerQ |
| 1f360 | 75 65 75 65 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e | ueue.__imp_RtlCreateUnicodeStrin |
| 1f380 | 67 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 46 72 | g.__imp_RtlCreateUnicodeStringFr |
| 1f3a0 | 6f 6d 41 73 63 69 69 7a 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72 50 72 6f 63 | omAsciiz.__imp_RtlCreateUserProc |
| 1f3c0 | 65 73 73 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72 53 65 63 75 72 69 74 79 4f | ess.__imp_RtlCreateUserSecurityO |
| 1f3e0 | 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72 54 68 72 65 61 64 00 | bject.__imp_RtlCreateUserThread. |
| 1f400 | 5f 5f 69 6d 70 5f 52 74 6c 43 75 73 74 6f 6d 43 50 54 6f 55 6e 69 63 6f 64 65 4e 00 5f 5f 69 6d | __imp_RtlCustomCPToUnicodeN.__im |
| 1f420 | 70 5f 52 74 6c 43 75 74 6f 76 65 72 54 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 | p_RtlCutoverTimeToSystemTime.__i |
| 1f440 | 6d 70 5f 52 74 6c 44 65 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 5f | mp_RtlDeNormalizeProcessParams._ |
| 1f460 | 5f 69 6d 70 5f 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 | _imp_RtlDeactivateActivationCont |
| 1f480 | 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f | ext.__imp_RtlDeactivateActivatio |
| 1f4a0 | 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 62 75 | nContextUnsafeFast.__imp_RtlDebu |
| 1f4c0 | 67 50 72 69 6e 74 54 69 6d 65 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 63 6f 64 65 50 6f 69 6e 74 | gPrintTimes.__imp_RtlDecodePoint |
| 1f4e0 | 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 63 6f 64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 00 | er.__imp_RtlDecodeSystemPointer. |
| 1f500 | 5f 5f 69 6d 70 5f 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f | __imp_RtlDecompressBuffer.__imp_ |
| 1f520 | 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 46 72 61 67 6d 65 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 | RtlDecompressFragment.__imp_RtlD |
| 1f540 | 65 66 61 75 6c 74 4e 70 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 00 5f 5f 69 6d | efaultNpAcl.__imp_RtlDelete.__im |
| 1f560 | 70 5f 52 74 6c 44 65 6c 65 74 65 41 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 41 74 | p_RtlDeleteAce.__imp_RtlDeleteAt |
| 1f580 | 6f 6d 46 72 6f 6d 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 43 | omFromAtomTable.__imp_RtlDeleteC |
| 1f5a0 | 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 45 6c | riticalSection.__imp_RtlDeleteEl |
| 1f5c0 | 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 | ementGenericTable.__imp_RtlDelet |
| 1f5e0 | 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 | eElementGenericTableAvl.__imp_Rt |
| 1f600 | 6c 44 65 6c 65 74 65 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 | lDeleteFunctionTable.__imp_RtlDe |
| 1f620 | 6c 65 74 65 4e 6f 53 70 6c 61 79 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 52 65 67 69 73 | leteNoSplay.__imp_RtlDeleteRegis |
| 1f640 | 74 72 79 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 52 65 73 6f 75 72 63 65 | tryValue.__imp_RtlDeleteResource |
| 1f660 | 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f | .__imp_RtlDeleteSecurityObject._ |
| 1f680 | 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c | _imp_RtlDeleteTimer.__imp_RtlDel |
| 1f6a0 | 65 74 65 54 69 6d 65 72 51 75 65 75 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 6c 65 74 65 54 69 6d | eteTimerQueue.__imp_RtlDeleteTim |
| 1f6c0 | 65 72 51 75 65 75 65 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 | erQueueEx.__imp_RtlDeregisterWai |
| 1f6e0 | 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 74 45 78 00 5f 5f 69 6d | t.__imp_RtlDeregisterWaitEx.__im |
| 1f700 | 70 5f 52 74 6c 44 65 73 74 72 6f 79 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 | p_RtlDestroyAtomTable.__imp_RtlD |
| 1f720 | 65 73 74 72 6f 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 73 74 72 | estroyEnvironment.__imp_RtlDestr |
| 1f740 | 6f 79 48 61 6e 64 6c 65 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 73 74 72 6f 79 48 65 | oyHandleTable.__imp_RtlDestroyHe |
| 1f760 | 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 73 74 72 6f 79 50 72 6f 63 65 73 73 50 61 72 61 6d 65 | ap.__imp_RtlDestroyProcessParame |
| 1f780 | 74 65 72 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 73 74 72 6f 79 51 75 65 72 79 44 65 62 75 67 42 | ters.__imp_RtlDestroyQueryDebugB |
| 1f7a0 | 75 66 66 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 65 74 65 72 6d 69 6e 65 44 6f 73 50 61 74 68 4e | uffer.__imp_RtlDetermineDosPathN |
| 1f7c0 | 61 6d 65 54 79 70 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 44 6c 6c 53 68 75 74 64 6f 77 6e 49 6e | ameType_U.__imp_RtlDllShutdownIn |
| 1f7e0 | 50 72 6f 67 72 65 73 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 6e 73 48 6f 73 74 4e 61 6d 65 54 6f 43 | Progress.__imp_RtlDnsHostNameToC |
| 1f800 | 6f 6d 70 75 74 65 72 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 65 73 46 69 6c 65 45 78 69 | omputerName.__imp_RtlDoesFileExi |
| 1f820 | 73 74 73 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 73 41 70 70 6c 79 46 69 6c 65 49 73 6f 6c 61 | sts_U.__imp_RtlDosApplyFileIsola |
| 1f840 | 74 69 6f 6e 52 65 64 69 72 65 63 74 69 6f 6e 5f 55 73 74 72 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f | tionRedirection_Ustr.__imp_RtlDo |
| 1f860 | 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 | sPathNameToNtPathName_U.__imp_Rt |
| 1f880 | 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 | lDosPathNameToNtPathName_U_WithS |
| 1f8a0 | 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 | tatus.__imp_RtlDosPathNameToRela |
| 1f8c0 | 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 73 50 61 74 | tiveNtPathName_U.__imp_RtlDosPat |
| 1f8e0 | 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 | hNameToRelativeNtPathName_U_With |
| 1f900 | 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 00 | Status.__imp_RtlDosSearchPath_U. |
| 1f920 | 5f 5f 69 6d 70 5f 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 73 74 72 00 5f 5f 69 6d | __imp_RtlDosSearchPath_Ustr.__im |
| 1f940 | 70 5f 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61 72 00 5f 5f 69 6d 70 5f 52 | p_RtlDowncaseUnicodeChar.__imp_R |
| 1f960 | 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 | tlDowncaseUnicodeString.__imp_Rt |
| 1f980 | 6c 44 75 6d 70 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 44 75 70 6c 69 63 61 74 65 | lDumpResource.__imp_RtlDuplicate |
| 1f9a0 | 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 45 6d 70 74 79 41 74 6f 6d | UnicodeString.__imp_RtlEmptyAtom |
| 1f9c0 | 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 61 62 6c 65 45 61 72 6c 79 43 72 69 74 69 63 | Table.__imp_RtlEnableEarlyCritic |
| 1f9e0 | 61 6c 53 65 63 74 69 6f 6e 45 76 65 6e 74 43 72 65 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c | alSectionEventCreation.__imp_Rtl |
| 1fa00 | 45 6e 63 6f 64 65 50 6f 69 6e 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 63 6f 64 65 53 79 73 | EncodePointer.__imp_RtlEncodeSys |
| 1fa20 | 74 65 6d 50 6f 69 6e 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 74 65 72 43 72 69 74 69 63 61 | temPointer.__imp_RtlEnterCritica |
| 1fa40 | 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73 73 48 65 61 | lSection.__imp_RtlEnumProcessHea |
| 1fa60 | 70 73 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c | ps.__imp_RtlEnumerateGenericTabl |
| 1fa80 | 65 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 | e.__imp_RtlEnumerateGenericTable |
| 1faa0 | 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 | Avl.__imp_RtlEnumerateGenericTab |
| 1fac0 | 6c 65 4c 69 6b 65 41 44 69 72 65 63 74 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 | leLikeADirectory.__imp_RtlEnumer |
| 1fae0 | 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 00 5f | ateGenericTableWithoutSplaying._ |
| 1fb00 | 5f 69 6d 70 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74 | _imp_RtlEnumerateGenericTableWit |
| 1fb20 | 68 6f 75 74 53 70 6c 61 79 69 6e 67 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 43 6f | houtSplayingAvl.__imp_RtlEqualCo |
| 1fb40 | 6d 70 75 74 65 72 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 44 6f 6d 61 69 6e 4e | mputerName.__imp_RtlEqualDomainN |
| 1fb60 | 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 4c 75 69 64 00 5f 5f 69 6d 70 5f 52 74 6c | ame.__imp_RtlEqualLuid.__imp_Rtl |
| 1fb80 | 45 71 75 61 6c 50 72 65 66 69 78 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 53 69 64 | EqualPrefixSid.__imp_RtlEqualSid |
| 1fba0 | 00 5f 5f 69 6d 70 5f 52 74 6c 45 71 75 61 6c 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 45 | .__imp_RtlEqualString.__imp_RtlE |
| 1fbc0 | 71 75 61 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 45 72 61 73 65 | qualUnicodeString.__imp_RtlErase |
| 1fbe0 | 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 45 78 69 74 55 73 65 72 54 | UnicodeString.__imp_RtlExitUserT |
| 1fc00 | 68 72 65 61 64 00 5f 5f 69 6d 70 5f 52 74 6c 45 78 70 61 6e 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 | hread.__imp_RtlExpandEnvironment |
| 1fc20 | 53 74 72 69 6e 67 73 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 45 78 74 65 6e 64 48 65 61 70 00 5f 5f | Strings_U.__imp_RtlExtendHeap.__ |
| 1fc40 | 69 6d 70 5f 52 74 6c 46 69 6c 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 61 6c | imp_RtlFillMemory.__imp_RtlFinal |
| 1fc60 | 52 65 6c 65 61 73 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 | ReleaseOutOfProcessMemoryStream. |
| 1fc80 | 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 | __imp_RtlFindActivationContextSe |
| 1fca0 | 63 74 69 6f 6e 47 75 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 69 6f | ctionGuid.__imp_RtlFindActivatio |
| 1fcc0 | 6e 43 6f 6e 74 65 78 74 53 65 63 74 69 6f 6e 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 46 | nContextSectionString.__imp_RtlF |
| 1fce0 | 69 6e 64 43 68 61 72 49 6e 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c | indCharInUnicodeString.__imp_Rtl |
| 1fd00 | 46 69 6e 64 43 6c 65 61 72 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72 | FindClearBits.__imp_RtlFindClear |
| 1fd20 | 42 69 74 73 41 6e 64 53 65 74 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72 52 75 6e | BitsAndSet.__imp_RtlFindClearRun |
| 1fd40 | 73 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 4c 61 73 74 42 61 63 6b 77 61 72 64 52 75 6e 43 6c | s.__imp_RtlFindLastBackwardRunCl |
| 1fd60 | 65 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 4c 65 61 73 74 53 69 67 6e 69 66 69 63 61 6e | ear.__imp_RtlFindLeastSignifican |
| 1fd80 | 74 42 69 74 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 4c 6f 6e 67 65 73 74 52 75 6e 43 6c 65 61 | tBit.__imp_RtlFindLongestRunClea |
| 1fda0 | 72 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 4d 65 73 73 61 67 65 00 5f 5f 69 6d 70 5f 52 74 6c | r.__imp_RtlFindMessage.__imp_Rtl |
| 1fdc0 | 46 69 6e 64 4d 6f 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 00 5f 5f 69 6d 70 5f 52 74 6c | FindMostSignificantBit.__imp_Rtl |
| 1fde0 | 46 69 6e 64 4e 65 78 74 46 6f 72 77 61 72 64 52 75 6e 43 6c 65 61 72 00 5f 5f 69 6d 70 5f 52 74 | FindNextForwardRunClear.__imp_Rt |
| 1fe00 | 6c 46 69 6e 64 53 65 74 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 6e 64 53 65 74 42 69 74 | lFindSetBits.__imp_RtlFindSetBit |
| 1fe20 | 73 41 6e 64 43 6c 65 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 72 73 74 45 6e 74 72 79 53 4c 69 | sAndClear.__imp_RtlFirstEntrySLi |
| 1fe40 | 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 46 69 72 73 74 46 72 65 65 41 63 65 00 5f 5f 69 6d 70 5f 52 | st.__imp_RtlFirstFreeAce.__imp_R |
| 1fe60 | 74 6c 46 6c 75 73 68 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68 65 00 5f 5f 69 6d 70 5f 52 | tlFlushSecureMemoryCache.__imp_R |
| 1fe80 | 74 6c 46 6f 72 6d 61 74 43 75 72 72 65 6e 74 55 73 65 72 4b 65 79 50 61 74 68 00 5f 5f 69 6d 70 | tlFormatCurrentUserKeyPath.__imp |
| 1fea0 | 5f 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 00 5f 5f 69 6d 70 5f 52 74 6c 46 6f 72 6d 61 | _RtlFormatMessage.__imp_RtlForma |
| 1fec0 | 74 4d 65 73 73 61 67 65 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 41 63 74 69 76 61 74 69 | tMessageEx.__imp_RtlFreeActivati |
| 1fee0 | 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 41 6e 73 69 | onContextStack.__imp_RtlFreeAnsi |
| 1ff00 | 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 | String.__imp_RtlFreeHandle.__imp |
| 1ff20 | 5f 52 74 6c 46 72 65 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 4f 65 6d 53 74 72 | _RtlFreeHeap.__imp_RtlFreeOemStr |
| 1ff40 | 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 65 65 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 46 72 | ing.__imp_RtlFreeSid.__imp_RtlFr |
| 1ff60 | 65 65 54 68 72 65 61 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 5f | eeThreadActivationContextStack._ |
| 1ff80 | 5f 69 6d 70 5f 52 74 6c 46 72 65 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f | _imp_RtlFreeUnicodeString.__imp_ |
| 1ffa0 | 52 74 6c 46 72 65 65 55 73 65 72 54 68 72 65 61 64 53 74 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c | RtlFreeUserThreadStack.__imp_Rtl |
| 1ffc0 | 47 55 49 44 46 72 6f 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 6e 65 72 61 74 65 | GUIDFromString.__imp_RtlGenerate |
| 1ffe0 | 38 64 6f 74 33 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 41 63 65 00 5f 5f 69 6d 70 5f | 8dot3Name.__imp_RtlGetAce.__imp_ |
| 20000 | 52 74 6c 47 65 74 41 63 74 69 76 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f | RtlGetActiveActivationContext.__ |
| 20020 | 69 6d 70 5f 52 74 6c 47 65 74 43 61 6c 6c 65 72 73 41 64 64 72 65 73 73 00 5f 5f 69 6d 70 5f 52 | imp_RtlGetCallersAddress.__imp_R |
| 20040 | 74 6c 47 65 74 43 6f 6d 70 72 65 73 73 69 6f 6e 57 6f 72 6b 53 70 61 63 65 53 69 7a 65 00 5f 5f | tlGetCompressionWorkSpaceSize.__ |
| 20060 | 69 6d 70 5f 52 74 6c 47 65 74 43 6f 6e 74 72 6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 | imp_RtlGetControlSecurityDescrip |
| 20080 | 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 52 | tor.__imp_RtlGetCriticalSectionR |
| 200a0 | 65 63 75 72 73 69 6f 6e 43 6f 75 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 75 72 72 65 6e | ecursionCount.__imp_RtlGetCurren |
| 200c0 | 74 44 69 72 65 63 74 6f 72 79 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74 | tDirectory_U.__imp_RtlGetCurrent |
| 200e0 | 50 65 62 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 | Peb.__imp_RtlGetCurrentProcessor |
| 20100 | 4e 75 6d 62 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 | Number.__imp_RtlGetDaclSecurityD |
| 20120 | 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74 47 65 6e | escriptor.__imp_RtlGetElementGen |
| 20140 | 65 72 69 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74 47 65 6e | ericTable.__imp_RtlGetElementGen |
| 20160 | 65 72 69 63 54 61 62 6c 65 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 46 72 61 6d 65 00 5f | ericTableAvl.__imp_RtlGetFrame._ |
| 20180 | 5f 69 6d 70 5f 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 00 5f 5f 69 6d 70 5f | _imp_RtlGetFullPathName_U.__imp_ |
| 201a0 | 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 73 74 72 45 78 00 5f 5f 69 6d 70 5f | RtlGetFullPathName_UstrEx.__imp_ |
| 201c0 | 52 74 6c 47 65 74 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 4c 69 73 74 48 65 61 64 00 5f 5f 69 6d | RtlGetFunctionTableListHead.__im |
| 201e0 | 70 5f 52 74 6c 47 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 | p_RtlGetGroupSecurityDescriptor. |
| 20200 | 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4c 61 73 74 4e 74 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 | __imp_RtlGetLastNtStatus.__imp_R |
| 20220 | 74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 | tlGetLastWin32Error.__imp_RtlGet |
| 20240 | 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 4c 61 73 74 46 75 6c 6c 44 6f 73 4f 72 4e 74 50 61 74 68 | LengthWithoutLastFullDosOrNtPath |
| 20260 | 45 6c 65 6d 65 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4c 65 6e 67 74 68 57 69 74 68 6f 75 | Element.__imp_RtlGetLengthWithou |
| 20280 | 74 54 72 61 69 6c 69 6e 67 50 61 74 68 53 65 70 65 72 61 74 6f 72 73 00 5f 5f 69 6d 70 5f 52 74 | tTrailingPathSeperators.__imp_Rt |
| 202a0 | 6c 47 65 74 4c 6f 6e 67 65 73 74 4e 74 50 61 74 68 4c 65 6e 67 74 68 00 5f 5f 69 6d 70 5f 52 74 | lGetLongestNtPathLength.__imp_Rt |
| 202c0 | 6c 47 65 74 4e 61 74 69 76 65 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d | lGetNativeSystemInformation.__im |
| 202e0 | 70 5f 52 74 6c 47 65 74 4e 74 47 6c 6f 62 61 6c 46 6c 61 67 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 | p_RtlGetNtGlobalFlags.__imp_RtlG |
| 20300 | 65 74 4e 74 50 72 6f 64 75 63 74 54 79 70 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4e 74 56 65 | etNtProductType.__imp_RtlGetNtVe |
| 20320 | 72 73 69 6f 6e 4e 75 6d 62 65 72 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 4f 77 6e 65 72 53 65 | rsionNumbers.__imp_RtlGetOwnerSe |
| 20340 | 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 50 72 6f | curityDescriptor.__imp_RtlGetPro |
| 20360 | 63 65 73 73 48 65 61 70 73 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 53 61 63 6c 53 65 63 75 72 69 | cessHeaps.__imp_RtlGetSaclSecuri |
| 20380 | 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 53 65 63 75 72 69 74 | tyDescriptor.__imp_RtlGetSecurit |
| 203a0 | 79 44 65 73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 | yDescriptorRMControl.__imp_RtlGe |
| 203c0 | 74 53 65 74 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 54 | tSetBootStatusData.__imp_RtlGetT |
| 203e0 | 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 55 6e 6c 6f 61 | hreadErrorMode.__imp_RtlGetUnloa |
| 20400 | 64 45 76 65 6e 74 54 72 61 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 55 73 65 72 49 6e 66 6f | dEventTrace.__imp_RtlGetUserInfo |
| 20420 | 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 47 65 74 56 65 72 73 69 6f 6e 00 5f 5f 69 6d 70 5f 52 | Heap.__imp_RtlGetVersion.__imp_R |
| 20440 | 74 6c 48 61 73 68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 64 65 | tlHashUnicodeString.__imp_RtlIde |
| 20460 | 6e 74 69 66 69 65 72 41 75 74 68 6f 72 69 74 79 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 61 | ntifierAuthoritySid.__imp_RtlIma |
| 20480 | 67 65 44 69 72 65 63 74 6f 72 79 45 6e 74 72 79 54 6f 44 61 74 61 00 5f 5f 69 6d 70 5f 52 74 6c | geDirectoryEntryToData.__imp_Rtl |
| 204a0 | 49 6d 61 67 65 4e 74 48 65 61 64 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 61 67 65 4e 74 48 65 | ImageNtHeader.__imp_RtlImageNtHe |
| 204c0 | 61 64 65 72 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 61 67 65 52 76 61 54 6f 53 65 63 74 69 6f | aderEx.__imp_RtlImageRvaToSectio |
| 204e0 | 6e 00 5f 5f 69 6d 70 5f 52 74 6c 49 6d 61 67 65 52 76 61 54 6f 56 61 00 5f 5f 69 6d 70 5f 52 74 | n.__imp_RtlImageRvaToVa.__imp_Rt |
| 20500 | 6c 49 6d 70 65 72 73 6f 6e 61 74 65 53 65 6c 66 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 41 6e | lImpersonateSelf.__imp_RtlInitAn |
| 20520 | 73 69 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67 | siString.__imp_RtlInitAnsiString |
| 20540 | 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 43 6f 64 65 50 61 67 65 54 61 62 6c 65 00 5f 5f | Ex.__imp_RtlInitCodePageTable.__ |
| 20560 | 69 6d 70 5f 52 74 6c 49 6e 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 | imp_RtlInitMemoryStream.__imp_Rt |
| 20580 | 6c 49 6e 69 74 4e 6c 73 54 61 62 6c 65 73 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 4f 75 74 4f | lInitNlsTables.__imp_RtlInitOutO |
| 205a0 | 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e | fProcessMemoryStream.__imp_RtlIn |
| 205c0 | 69 74 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 | itString.__imp_RtlInitUnicodeStr |
| 205e0 | 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 45 78 | ing.__imp_RtlInitUnicodeStringEx |
| 20600 | 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 41 74 6f 6d 50 61 63 6b 61 67 65 00 | .__imp_RtlInitializeAtomPackage. |
| 20620 | 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 42 69 74 4d 61 70 00 5f 5f 69 6d 70 5f | __imp_RtlInitializeBitMap.__imp_ |
| 20640 | 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e | RtlInitializeContext.__imp_RtlIn |
| 20660 | 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 | itializeCriticalSection.__imp_Rt |
| 20680 | 6c 49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 41 6e 64 53 70 69 | lInitializeCriticalSectionAndSpi |
| 206a0 | 6e 43 6f 75 6e 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 | nCount.__imp_RtlInitializeGeneri |
| 206c0 | 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 | cTable.__imp_RtlInitializeGeneri |
| 206e0 | 63 54 61 62 6c 65 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61 6e | cTableAvl.__imp_RtlInitializeHan |
| 20700 | 64 6c 65 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 58 61 63 | dleTable.__imp_RtlInitializeRXac |
| 20720 | 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 65 73 6f 75 72 63 65 00 5f 5f | t.__imp_RtlInitializeResource.__ |
| 20740 | 69 6d 70 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 4c 69 73 74 48 65 61 64 00 5f 5f 69 6d 70 | imp_RtlInitializeSListHead.__imp |
| 20760 | 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 73 65 72 | _RtlInitializeSid.__imp_RtlInser |
| 20780 | 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e | tElementGenericTable.__imp_RtlIn |
| 207a0 | 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 5f 5f 69 6d 70 | sertElementGenericTableAvl.__imp |
| 207c0 | 5f 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c | _RtlInsertElementGenericTableFul |
| 207e0 | 6c 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 | l.__imp_RtlInsertElementGenericT |
| 20800 | 61 62 6c 65 46 75 6c 6c 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 73 74 61 6c 6c 46 75 6e 63 | ableFullAvl.__imp_RtlInstallFunc |
| 20820 | 74 69 6f 6e 54 61 62 6c 65 43 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 36 34 | tionTableCallback.__imp_RtlInt64 |
| 20840 | 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 67 65 72 | ToUnicodeString.__imp_RtlInteger |
| 20860 | 54 6f 43 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 67 65 72 54 6f 55 6e 69 63 6f 64 65 | ToChar.__imp_RtlIntegerToUnicode |
| 20880 | 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 46 6c 75 73 68 | String.__imp_RtlInterlockedFlush |
| 208a0 | 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 6f 70 45 6e 74 | SList.__imp_RtlInterlockedPopEnt |
| 208c0 | 72 79 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 75 73 68 | rySList.__imp_RtlInterlockedPush |
| 208e0 | 45 6e 74 72 79 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 | EntrySList.__imp_RtlInterlockedP |
| 20900 | 75 73 68 4c 69 73 74 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 41 64 64 72 65 73 | ushListSList.__imp_RtlIpv4Addres |
| 20920 | 73 54 6f 53 74 72 69 6e 67 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 | sToStringA.__imp_RtlIpv4AddressT |
| 20940 | 6f 53 74 72 69 6e 67 45 78 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 | oStringExA.__imp_RtlIpv4AddressT |
| 20960 | 6f 53 74 72 69 6e 67 45 78 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 | oStringExW.__imp_RtlIpv4AddressT |
| 20980 | 6f 53 74 72 69 6e 67 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 | oStringW.__imp_RtlIpv4StringToAd |
| 209a0 | 64 72 65 73 73 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 | dressA.__imp_RtlIpv4StringToAddr |
| 209c0 | 65 73 73 45 78 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 | essExA.__imp_RtlIpv4StringToAddr |
| 209e0 | 65 73 73 45 78 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 | essExW.__imp_RtlIpv4StringToAddr |
| 20a00 | 65 73 73 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e | essW.__imp_RtlIpv6AddressToStrin |
| 20a20 | 67 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 | gA.__imp_RtlIpv6AddressToStringE |
| 20a40 | 78 41 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 | xA.__imp_RtlIpv6AddressToStringE |
| 20a60 | 78 57 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 57 | xW.__imp_RtlIpv6AddressToStringW |
| 20a80 | 00 5f 5f 69 6d 70 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 41 00 5f | .__imp_RtlIpv6StringToAddressA._ |
| 20aa0 | 5f 69 6d 70 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 41 00 5f | _imp_RtlIpv6StringToAddressExA._ |
| 20ac0 | 5f 69 6d 70 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 00 5f | _imp_RtlIpv6StringToAddressExW._ |
| 20ae0 | 5f 69 6d 70 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 57 00 5f 5f 69 | _imp_RtlIpv6StringToAddressW.__i |
| 20b00 | 6d 70 5f 52 74 6c 49 73 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 41 63 74 69 76 65 00 | mp_RtlIsActivationContextActive. |
| 20b20 | 5f 5f 69 6d 70 5f 52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 | __imp_RtlIsCriticalSectionLocked |
| 20b40 | 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 | .__imp_RtlIsCriticalSectionLocke |
| 20b60 | 64 42 79 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 44 6f 73 44 65 76 69 63 65 4e 61 | dByThread.__imp_RtlIsDosDeviceNa |
| 20b80 | 6d 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74 | me_U.__imp_RtlIsGenericTableEmpt |
| 20ba0 | 79 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74 79 41 76 | y.__imp_RtlIsGenericTableEmptyAv |
| 20bc0 | 6c 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 4e 61 6d 65 4c 65 67 61 6c 44 4f 53 38 44 6f 74 33 00 5f | l.__imp_RtlIsNameLegalDOS8Dot3._ |
| 20be0 | 5f 69 6d 70 5f 52 74 6c 49 73 54 65 78 74 55 6e 69 63 6f 64 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 | _imp_RtlIsTextUnicode.__imp_RtlI |
| 20c00 | 73 54 68 72 65 61 64 57 69 74 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c 6f 75 74 00 5f 5f 69 6d 70 | sThreadWithinLoaderCallout.__imp |
| 20c20 | 5f 52 74 6c 49 73 56 61 6c 69 64 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 49 73 56 61 6c | _RtlIsValidHandle.__imp_RtlIsVal |
| 20c40 | 69 64 49 6e 64 65 78 48 61 6e 64 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 | idIndexHandle.__imp_RtlLargeInte |
| 20c60 | 67 65 72 54 6f 43 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 4c 65 61 76 65 43 72 69 74 69 63 61 6c | gerToChar.__imp_RtlLeaveCritical |
| 20c80 | 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 4c 65 6e 67 74 68 52 65 71 75 69 72 65 64 53 | Section.__imp_RtlLengthRequiredS |
| 20ca0 | 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 4c 65 6e 67 74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 69 | id.__imp_RtlLengthSecurityDescri |
| 20cc0 | 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 4c 65 6e 67 74 68 53 69 64 00 5f 5f 69 6d 70 5f 52 74 | ptor.__imp_RtlLengthSid.__imp_Rt |
| 20ce0 | 6c 4c 6f 63 61 6c 54 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c | lLocalTimeToSystemTime.__imp_Rtl |
| 20d00 | 4c 6f 63 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 63 6b | LockBootStatusData.__imp_RtlLock |
| 20d20 | 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 | Heap.__imp_RtlLockMemoryStreamRe |
| 20d40 | 67 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 67 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 | gion.__imp_RtlLogStackBackTrace. |
| 20d60 | 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 5f | __imp_RtlLookupAtomInAtomTable._ |
| 20d80 | 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c | _imp_RtlLookupElementGenericTabl |
| 20da0 | 65 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 | e.__imp_RtlLookupElementGenericT |
| 20dc0 | 61 62 6c 65 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 | ableAvl.__imp_RtlLookupElementGe |
| 20de0 | 6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 00 5f 5f 69 6d 70 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c | nericTableFull.__imp_RtlLookupEl |
| 20e00 | 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 41 76 6c 00 5f 5f 69 6d 70 5f 52 | ementGenericTableFullAvl.__imp_R |
| 20e20 | 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 4c | tlLookupFunctionEntry.__imp_RtlL |
| 20e40 | 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 4d 61 6b 65 | ookupFunctionTable.__imp_RtlMake |
| 20e60 | 53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 00 5f 5f 69 6d 70 5f 52 74 6c 4d 61 70 47 65 6e 65 72 | SelfRelativeSD.__imp_RtlMapGener |
| 20e80 | 69 63 4d 61 73 6b 00 5f 5f 69 6d 70 5f 52 74 6c 4d 61 70 53 65 63 75 72 69 74 79 45 72 72 6f 72 | icMask.__imp_RtlMapSecurityError |
| 20ea0 | 54 6f 4e 74 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 4d 6f 76 65 4d 65 6d 6f 72 79 00 5f | ToNtStatus.__imp_RtlMoveMemory._ |
| 20ec0 | 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | _imp_RtlMultiAppendUnicodeString |
| 20ee0 | 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f | Buffer.__imp_RtlMultiByteToUnico |
| 20f00 | 64 65 4e 00 5f 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 53 | deN.__imp_RtlMultiByteToUnicodeS |
| 20f20 | 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 70 6c 65 41 6c 6c 6f 63 61 74 65 48 65 61 | ize.__imp_RtlMultipleAllocateHea |
| 20f40 | 70 00 5f 5f 69 6d 70 5f 52 74 6c 4d 75 6c 74 69 70 6c 65 46 72 65 65 48 65 61 70 00 5f 5f 69 6d | p.__imp_RtlMultipleFreeHeap.__im |
| 20f60 | 70 5f 52 74 6c 4e 65 77 49 6e 73 74 61 6e 63 65 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f | p_RtlNewInstanceSecurityObject._ |
| 20f80 | 5f 69 6d 70 5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 47 72 61 6e 74 65 64 41 63 63 65 73 73 | _imp_RtlNewSecurityGrantedAccess |
| 20fa0 | 00 5f 5f 69 6d 70 5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d | .__imp_RtlNewSecurityObject.__im |
| 20fc0 | 70 5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 45 78 00 5f 5f 69 6d 70 5f 52 | p_RtlNewSecurityObjectEx.__imp_R |
| 20fe0 | 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 57 69 74 68 4d 75 6c 74 69 70 6c 65 49 | tlNewSecurityObjectWithMultipleI |
| 21000 | 6e 68 65 72 69 74 61 6e 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f | nheritance.__imp_RtlNormalizePro |
| 21020 | 63 65 73 73 50 61 72 61 6d 73 00 5f 5f 69 6d 70 5f 52 74 6c 4e 74 50 61 74 68 4e 61 6d 65 54 6f | cessParams.__imp_RtlNtPathNameTo |
| 21040 | 44 6f 73 50 61 74 68 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 | DosPathName.__imp_RtlNtStatusToD |
| 21060 | 6f 73 45 72 72 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 | osError.__imp_RtlNtStatusToDosEr |
| 21080 | 72 6f 72 4e 6f 54 65 62 00 5f 5f 69 6d 70 5f 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54 | rorNoTeb.__imp_RtlNumberGenericT |
| 210a0 | 61 62 6c 65 45 6c 65 6d 65 6e 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 | ableElements.__imp_RtlNumberGene |
| 210c0 | 72 69 63 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 41 76 6c 00 5f 5f 69 6d 70 5f 52 74 6c 4e 75 6d | ricTableElementsAvl.__imp_RtlNum |
| 210e0 | 62 65 72 4f 66 43 6c 65 61 72 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 4e 75 6d 62 65 72 4f 66 | berOfClearBits.__imp_RtlNumberOf |
| 21100 | 53 65 74 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 | SetBits.__imp_RtlOemStringToUnic |
| 21120 | 6f 64 65 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 | odeSize.__imp_RtlOemStringToUnic |
| 21140 | 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 4f 65 6d 54 6f 55 6e 69 63 6f 64 65 4e | odeString.__imp_RtlOemToUnicodeN |
| 21160 | 00 5f 5f 69 6d 70 5f 52 74 6c 4f 70 65 6e 43 75 72 72 65 6e 74 55 73 65 72 00 5f 5f 69 6d 70 5f | .__imp_RtlOpenCurrentUser.__imp_ |
| 21180 | 52 74 6c 50 63 54 6f 46 69 6c 65 48 65 61 64 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 50 69 6e 41 74 | RtlPcToFileHeader.__imp_RtlPinAt |
| 211a0 | 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 74 6c 50 6f 70 46 72 61 6d 65 00 | omInAtomTable.__imp_RtlPopFrame. |
| 211c0 | 5f 5f 69 6d 70 5f 52 74 6c 50 72 65 66 69 78 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 50 | __imp_RtlPrefixString.__imp_RtlP |
| 211e0 | 72 65 66 69 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 50 72 6f 74 | refixUnicodeString.__imp_RtlProt |
| 21200 | 65 63 74 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 50 75 73 68 46 72 61 6d 65 00 5f 5f 69 6d 70 | ectHeap.__imp_RtlPushFrame.__imp |
| 21220 | 5f 52 74 6c 51 75 65 72 79 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 5f 5f 69 6d 70 5f 52 | _RtlQueryAtomInAtomTable.__imp_R |
| 21240 | 74 6c 51 75 65 72 79 44 65 70 74 68 53 4c 69 73 74 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 | tlQueryDepthSList.__imp_RtlQuery |
| 21260 | 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 5f 55 00 5f 5f 69 6d 70 5f 52 74 6c 51 | EnvironmentVariable_U.__imp_RtlQ |
| 21280 | 75 65 72 79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 | ueryHeapInformation.__imp_RtlQue |
| 212a0 | 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 49 | ryInformationAcl.__imp_RtlQueryI |
| 212c0 | 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d | nformationActivationContext.__im |
| 212e0 | 70 5f 52 74 6c 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 65 41 63 74 69 76 | p_RtlQueryInformationActiveActiv |
| 21300 | 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 49 6e 74 65 72 | ationContext.__imp_RtlQueryInter |
| 21320 | 66 61 63 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 50 | faceMemoryStream.__imp_RtlQueryP |
| 21340 | 72 6f 63 65 73 73 42 61 63 6b 54 72 61 63 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 | rocessBackTraceInformation.__imp |
| 21360 | 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 44 65 62 75 67 49 6e 66 6f 72 6d 61 74 69 6f 6e | _RtlQueryProcessDebugInformation |
| 21380 | 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 48 65 61 70 49 6e 66 6f 72 6d | .__imp_RtlQueryProcessHeapInform |
| 213a0 | 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 4c 6f 63 6b 49 | ation.__imp_RtlQueryProcessLockI |
| 213c0 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 52 65 67 69 73 74 72 | nformation.__imp_RtlQueryRegistr |
| 213e0 | 79 56 61 6c 75 65 73 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 | yValues.__imp_RtlQuerySecurityOb |
| 21400 | 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 51 75 65 72 79 54 61 67 48 65 61 70 00 5f 5f 69 6d 70 | ject.__imp_RtlQueryTagHeap.__imp |
| 21420 | 5f 52 74 6c 51 75 65 72 79 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 | _RtlQueryTimeZoneInformation.__i |
| 21440 | 6d 70 5f 52 74 6c 51 75 65 75 65 41 70 63 57 6f 77 36 34 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f | mp_RtlQueueApcWow64Thread.__imp_ |
| 21460 | 52 74 6c 51 75 65 75 65 57 6f 72 6b 49 74 65 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 61 69 73 65 45 | RtlQueueWorkItem.__imp_RtlRaiseE |
| 21480 | 78 63 65 70 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 52 61 69 73 65 53 74 61 74 75 73 00 5f 5f | xception.__imp_RtlRaiseStatus.__ |
| 214a0 | 69 6d 70 5f 52 74 6c 52 61 6e 64 6f 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 61 6e 64 6f 6d 45 78 00 | imp_RtlRandom.__imp_RtlRandomEx. |
| 214c0 | 5f 5f 69 6d 70 5f 52 74 6c 52 65 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 | __imp_RtlReAllocateHeap.__imp_Rt |
| 214e0 | 6c 52 65 61 64 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 61 64 4f | lReadMemoryStream.__imp_RtlReadO |
| 21500 | 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 | utOfProcessMemoryStream.__imp_Rt |
| 21520 | 6c 52 65 61 6c 50 72 65 64 65 63 65 73 73 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 61 6c 53 75 | lRealPredecessor.__imp_RtlRealSu |
| 21540 | 63 63 65 73 73 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 67 69 73 74 65 72 53 65 63 75 72 65 4d | ccessor.__imp_RtlRegisterSecureM |
| 21560 | 65 6d 6f 72 79 43 61 63 68 65 43 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 67 69 | emoryCacheCallback.__imp_RtlRegi |
| 21580 | 73 74 65 72 57 61 69 74 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 61 73 65 41 63 74 69 76 61 74 | sterWait.__imp_RtlReleaseActivat |
| 215a0 | 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 61 73 65 4d 65 6d 6f 72 | ionContext.__imp_RtlReleaseMemor |
| 215c0 | 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 61 73 65 50 65 62 4c 6f 63 6b 00 | yStream.__imp_RtlReleasePebLock. |
| 215e0 | 5f 5f 69 6d 70 5f 52 74 6c 52 65 6c 65 61 73 65 50 72 69 76 69 6c 65 67 65 00 5f 5f 69 6d 70 5f | __imp_RtlReleasePrivilege.__imp_ |
| 21600 | 52 74 6c 52 65 6c 65 61 73 65 52 65 6c 61 74 69 76 65 4e 61 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c | RtlReleaseRelativeName.__imp_Rtl |
| 21620 | 52 65 6c 65 61 73 65 52 65 73 6f 75 72 63 65 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6d 6f 74 65 43 | ReleaseResource.__imp_RtlRemoteC |
| 21640 | 61 6c 6c 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 | all.__imp_RtlRemoveVectoredConti |
| 21660 | 6e 75 65 48 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 | nueHandler.__imp_RtlRemoveVector |
| 21680 | 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 73 65 | edExceptionHandler.__imp_RtlRese |
| 216a0 | 74 52 74 6c 54 72 61 6e 73 6c 61 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 73 74 6f 72 | tRtlTranslations.__imp_RtlRestor |
| 216c0 | 65 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 73 74 6f 72 65 4c 61 73 74 57 69 6e | eContext.__imp_RtlRestoreLastWin |
| 216e0 | 33 32 45 72 72 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 52 65 76 65 72 74 4d 65 6d 6f 72 79 53 74 72 | 32Error.__imp_RtlRevertMemoryStr |
| 21700 | 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 52 75 6e 44 65 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 | eam.__imp_RtlRunDecodeUnicodeStr |
| 21720 | 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 52 75 6e 45 6e 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 | ing.__imp_RtlRunEncodeUnicodeStr |
| 21740 | 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 54 6f 54 | ing.__imp_RtlSecondsSince1970ToT |
| 21760 | 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 54 6f 54 | ime.__imp_RtlSecondsSince1980ToT |
| 21780 | 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 65 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f | ime.__imp_RtlSeekMemoryStream.__ |
| 217a0 | 69 6d 70 5f 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 00 | imp_RtlSelfRelativeToAbsoluteSD. |
| 217c0 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 | __imp_RtlSelfRelativeToAbsoluteS |
| 217e0 | 44 32 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 41 6c 6c 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c | D2.__imp_RtlSetAllBits.__imp_Rtl |
| 21800 | 53 65 74 41 74 74 72 69 62 75 74 65 73 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 | SetAttributesSecurityDescriptor. |
| 21820 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 42 69 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 43 6f 6e | __imp_RtlSetBits.__imp_RtlSetCon |
| 21840 | 74 72 6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c | trolSecurityDescriptor.__imp_Rtl |
| 21860 | 53 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 53 70 69 6e 43 6f 75 6e 74 00 5f 5f 69 6d | SetCriticalSectionSpinCount.__im |
| 21880 | 70 5f 52 74 6c 53 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 5f 55 00 5f 5f 69 6d 70 | p_RtlSetCurrentDirectory_U.__imp |
| 218a0 | 5f 52 74 6c 53 65 74 43 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 5f 5f 69 6d 70 5f | _RtlSetCurrentEnvironment.__imp_ |
| 218c0 | 52 74 6c 53 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 5f 5f 69 | RtlSetDaclSecurityDescriptor.__i |
| 218e0 | 6d 70 5f 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 73 00 5f 5f 69 6d | mp_RtlSetEnvironmentStrings.__im |
| 21900 | 70 5f 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 00 5f 5f 69 6d | p_RtlSetEnvironmentVariable.__im |
| 21920 | 70 5f 52 74 6c 53 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 | p_RtlSetGroupSecurityDescriptor. |
| 21940 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d | __imp_RtlSetHeapInformation.__im |
| 21960 | 70 5f 52 74 6c 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 00 5f 5f 69 6d 70 5f 52 74 6c | p_RtlSetInformationAcl.__imp_Rtl |
| 21980 | 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 00 5f 5f 69 6d 70 5f 52 74 | SetIoCompletionCallback.__imp_Rt |
| 219a0 | 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 4c | lSetLastWin32Error.__imp_RtlSetL |
| 219c0 | 61 73 74 57 69 6e 33 32 45 72 72 6f 72 41 6e 64 4e 74 53 74 61 74 75 73 46 72 6f 6d 4e 74 53 74 | astWin32ErrorAndNtStatusFromNtSt |
| 219e0 | 61 74 75 73 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 53 69 7a | atus.__imp_RtlSetMemoryStreamSiz |
| 21a00 | 65 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 4f 77 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 63 72 | e.__imp_RtlSetOwnerSecurityDescr |
| 21a20 | 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 50 72 6f 63 65 73 73 49 73 43 72 69 74 69 | iptor.__imp_RtlSetProcessIsCriti |
| 21a40 | 63 61 6c 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 53 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 | cal.__imp_RtlSetSaclSecurityDesc |
| 21a60 | 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 | riptor.__imp_RtlSetSecurityDescr |
| 21a80 | 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 53 65 63 75 72 | iptorRMControl.__imp_RtlSetSecur |
| 21aa0 | 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 4f 62 | ityObject.__imp_RtlSetSecurityOb |
| 21ac0 | 6a 65 63 74 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 68 72 65 61 64 45 72 72 6f 72 4d 6f | jectEx.__imp_RtlSetThreadErrorMo |
| 21ae0 | 64 65 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 68 72 65 61 64 49 73 43 72 69 74 69 63 61 6c 00 | de.__imp_RtlSetThreadIsCritical. |
| 21b00 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74 46 75 6e 63 00 | __imp_RtlSetThreadPoolStartFunc. |
| 21b20 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 | __imp_RtlSetTimeZoneInformation. |
| 21b40 | 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 55 6e | __imp_RtlSetTimer.__imp_RtlSetUn |
| 21b60 | 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 5f 5f 69 6d 70 5f 52 74 6c | handledExceptionFilter.__imp_Rtl |
| 21b80 | 53 65 74 55 6e 69 63 6f 64 65 43 61 6c 6c 6f 75 74 73 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 55 | SetUnicodeCallouts.__imp_RtlSetU |
| 21ba0 | 73 65 72 46 6c 61 67 73 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 53 65 74 55 73 65 72 56 61 6c | serFlagsHeap.__imp_RtlSetUserVal |
| 21bc0 | 75 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 53 69 7a 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 | ueHeap.__imp_RtlSizeHeap.__imp_R |
| 21be0 | 74 6c 53 70 6c 61 79 00 5f 5f 69 6d 70 5f 52 74 6c 53 74 61 72 74 52 58 61 63 74 00 5f 5f 69 6d | tlSplay.__imp_RtlStartRXact.__im |
| 21c00 | 70 5f 52 74 6c 53 74 61 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 53 | p_RtlStatMemoryStream.__imp_RtlS |
| 21c20 | 74 72 69 6e 67 46 72 6f 6d 47 55 49 44 00 5f 5f 69 6d 70 5f 52 74 6c 53 75 62 41 75 74 68 6f 72 | tringFromGUID.__imp_RtlSubAuthor |
| 21c40 | 69 74 79 43 6f 75 6e 74 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 | ityCountSid.__imp_RtlSubAuthorit |
| 21c60 | 79 53 69 64 00 5f 5f 69 6d 70 5f 52 74 6c 53 75 62 74 72 65 65 50 72 65 64 65 63 65 73 73 6f 72 | ySid.__imp_RtlSubtreePredecessor |
| 21c80 | 00 5f 5f 69 6d 70 5f 52 74 6c 53 75 62 74 72 65 65 53 75 63 63 65 73 73 6f 72 00 5f 5f 69 6d 70 | .__imp_RtlSubtreeSuccessor.__imp |
| 21ca0 | 5f 52 74 6c 53 79 73 74 65 6d 54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69 6d 65 00 5f 5f 69 6d 70 5f | _RtlSystemTimeToLocalTime.__imp_ |
| 21cc0 | 52 74 6c 54 69 6d 65 46 69 65 6c 64 73 54 6f 54 69 6d 65 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 6d | RtlTimeFieldsToTime.__imp_RtlTim |
| 21ce0 | 65 54 6f 45 6c 61 70 73 65 64 54 69 6d 65 46 69 65 6c 64 73 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 | eToElapsedTimeFields.__imp_RtlTi |
| 21d00 | 6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 | meToSecondsSince1970.__imp_RtlTi |
| 21d20 | 6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 00 5f 5f 69 6d 70 5f 52 74 6c 54 69 | meToSecondsSince1980.__imp_RtlTi |
| 21d40 | 6d 65 54 6f 54 69 6d 65 46 69 65 6c 64 73 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 | meToTimeFields.__imp_RtlTraceDat |
| 21d60 | 61 62 61 73 65 41 64 64 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 43 | abaseAdd.__imp_RtlTraceDatabaseC |
| 21d80 | 72 65 61 74 65 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 44 65 73 74 | reate.__imp_RtlTraceDatabaseDest |
| 21da0 | 72 6f 79 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 45 6e 75 6d 65 72 | roy.__imp_RtlTraceDatabaseEnumer |
| 21dc0 | 61 74 65 00 5f 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 46 69 6e 64 00 5f | ate.__imp_RtlTraceDatabaseFind._ |
| 21de0 | 5f 69 6d 70 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 4c 6f 63 6b 00 5f 5f 69 6d 70 5f | _imp_RtlTraceDatabaseLock.__imp_ |
| 21e00 | 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63 6b 00 5f 5f 69 6d 70 5f 52 74 6c | RtlTraceDatabaseUnlock.__imp_Rtl |
| 21e20 | 54 72 61 63 65 44 61 74 61 62 61 73 65 56 61 6c 69 64 61 74 65 00 5f 5f 69 6d 70 5f 52 74 6c 54 | TraceDatabaseValidate.__imp_RtlT |
| 21e40 | 72 79 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c | ryEnterCriticalSection.__imp_Rtl |
| 21e60 | 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 5f 5f 69 6d 70 5f 52 | UnhandledExceptionFilter.__imp_R |
| 21e80 | 74 6c 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 32 00 5f 5f 69 6d | tlUnhandledExceptionFilter2.__im |
| 21ea0 | 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 00 5f 5f 69 | p_RtlUnicodeStringToAnsiSize.__i |
| 21ec0 | 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e 67 00 | mp_RtlUnicodeStringToAnsiString. |
| 21ee0 | 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f | __imp_RtlUnicodeStringToCountedO |
| 21f00 | 65 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 | emString.__imp_RtlUnicodeStringT |
| 21f20 | 6f 49 6e 74 65 67 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 | oInteger.__imp_RtlUnicodeStringT |
| 21f40 | 6f 4f 65 6d 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 | oOemSize.__imp_RtlUnicodeStringT |
| 21f60 | 6f 4f 65 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 43 75 73 | oOemString.__imp_RtlUnicodeToCus |
| 21f80 | 74 6f 6d 43 50 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 | tomCPN.__imp_RtlUnicodeToMultiBy |
| 21fa0 | 74 65 4e 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 53 | teN.__imp_RtlUnicodeToMultiByteS |
| 21fc0 | 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e 00 5f 5f 69 6d 70 | ize.__imp_RtlUnicodeToOemN.__imp |
| 21fe0 | 5f 52 74 6c 55 6e 69 66 6f 72 6d 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 6c 6f 63 6b 42 6f 6f 74 53 | _RtlUniform.__imp_RtlUnlockBootS |
| 22000 | 74 61 74 75 73 44 61 74 61 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 6c 6f 63 6b 48 65 61 70 00 5f 5f | tatusData.__imp_RtlUnlockHeap.__ |
| 22020 | 69 6d 70 5f 52 74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e 00 | imp_RtlUnlockMemoryStreamRegion. |
| 22040 | 5f 5f 69 6d 70 5f 52 74 6c 55 6e 77 69 6e 64 00 5f 5f 69 6d 70 5f 52 74 6c 55 6e 77 69 6e 64 45 | __imp_RtlUnwind.__imp_RtlUnwindE |
| 22060 | 78 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61 72 00 5f 5f 69 | x.__imp_RtlUpcaseUnicodeChar.__i |
| 22080 | 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f | mp_RtlUpcaseUnicodeString.__imp_ |
| 220a0 | 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 | RtlUpcaseUnicodeStringToAnsiStri |
| 220c0 | 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 | ng.__imp_RtlUpcaseUnicodeStringT |
| 220e0 | 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 | oCountedOemString.__imp_RtlUpcas |
| 22100 | 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f | eUnicodeStringToOemString.__imp_ |
| 22120 | 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 43 75 73 74 6f 6d 43 50 4e 00 5f 5f 69 6d | RtlUpcaseUnicodeToCustomCPN.__im |
| 22140 | 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 4e 00 5f | p_RtlUpcaseUnicodeToMultiByteN._ |
| 22160 | 5f 69 6d 70 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e 00 5f 5f 69 6d | _imp_RtlUpcaseUnicodeToOemN.__im |
| 22180 | 70 5f 52 74 6c 55 70 64 61 74 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 70 65 72 43 | p_RtlUpdateTimer.__imp_RtlUpperC |
| 221a0 | 68 61 72 00 5f 5f 69 6d 70 5f 52 74 6c 55 70 70 65 72 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 | har.__imp_RtlUpperString.__imp_R |
| 221c0 | 74 6c 55 73 61 67 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 41 63 6c 00 5f 5f | tlUsageHeap.__imp_RtlValidAcl.__ |
| 221e0 | 69 6d 70 5f 52 74 6c 56 61 6c 69 64 52 65 6c 61 74 69 76 65 53 65 63 75 72 69 74 79 44 65 73 63 | imp_RtlValidRelativeSecurityDesc |
| 22200 | 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 53 65 63 75 72 69 74 79 44 65 73 | riptor.__imp_RtlValidSecurityDes |
| 22220 | 63 72 69 70 74 6f 72 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 53 69 64 00 5f 5f 69 6d 70 5f | criptor.__imp_RtlValidSid.__imp_ |
| 22240 | 52 74 6c 56 61 6c 69 64 61 74 65 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 61 74 | RtlValidateHeap.__imp_RtlValidat |
| 22260 | 65 50 72 6f 63 65 73 73 48 65 61 70 73 00 5f 5f 69 6d 70 5f 52 74 6c 56 61 6c 69 64 61 74 65 55 | eProcessHeaps.__imp_RtlValidateU |
| 22280 | 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 52 74 6c 56 65 72 69 66 79 56 65 72 73 | nicodeString.__imp_RtlVerifyVers |
| 222a0 | 69 6f 6e 49 6e 66 6f 00 5f 5f 69 6d 70 5f 52 74 6c 56 69 72 74 75 61 6c 55 6e 77 69 6e 64 00 5f | ionInfo.__imp_RtlVirtualUnwind._ |
| 222c0 | 5f 69 6d 70 5f 52 74 6c 57 61 6c 6b 46 72 61 6d 65 43 68 61 69 6e 00 5f 5f 69 6d 70 5f 52 74 6c | _imp_RtlWalkFrameChain.__imp_Rtl |
| 222e0 | 57 61 6c 6b 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 6c 57 6f 77 36 34 45 6e 61 62 6c 65 46 73 52 | WalkHeap.__imp_RtlWow64EnableFsR |
| 22300 | 65 64 69 72 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 57 6f 77 36 34 45 6e 61 62 6c 65 46 | edirection.__imp_RtlWow64EnableF |
| 22320 | 73 52 65 64 69 72 65 63 74 69 6f 6e 45 78 00 5f 5f 69 6d 70 5f 52 74 6c 57 72 69 74 65 4d 65 6d | sRedirectionEx.__imp_RtlWriteMem |
| 22340 | 6f 72 79 53 74 72 65 61 6d 00 5f 5f 69 6d 70 5f 52 74 6c 57 72 69 74 65 52 65 67 69 73 74 72 79 | oryStream.__imp_RtlWriteRegistry |
| 22360 | 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 52 74 6c 5a 65 72 6f 48 65 61 70 00 5f 5f 69 6d 70 5f 52 74 | Value.__imp_RtlZeroHeap.__imp_Rt |
| 22380 | 6c 5a 65 72 6f 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 52 74 6c 5a 6f 6d 62 69 66 79 41 63 74 69 | lZeroMemory.__imp_RtlZombifyActi |
| 223a0 | 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 52 74 6c 70 41 70 70 6c 79 4c 65 6e | vationContext.__imp_RtlpApplyLen |
| 223c0 | 67 74 68 46 75 6e 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 70 45 6e 73 75 72 65 42 75 66 66 | gthFunction.__imp_RtlpEnsureBuff |
| 223e0 | 65 72 53 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 70 4e 6f 74 4f 77 6e 65 72 43 72 69 74 69 63 61 | erSize.__imp_RtlpNotOwnerCritica |
| 22400 | 6c 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 52 74 6c 70 4e 74 43 72 65 61 74 65 4b 65 79 00 5f | lSection.__imp_RtlpNtCreateKey._ |
| 22420 | 5f 69 6d 70 5f 52 74 6c 70 4e 74 45 6e 75 6d 65 72 61 74 65 53 75 62 4b 65 79 00 5f 5f 69 6d 70 | _imp_RtlpNtEnumerateSubKey.__imp |
| 22440 | 5f 52 74 6c 70 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 | _RtlpNtMakeTemporaryKey.__imp_Rt |
| 22460 | 6c 70 4e 74 4f 70 65 6e 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 70 4e 74 51 75 65 72 79 56 61 6c | lpNtOpenKey.__imp_RtlpNtQueryVal |
| 22480 | 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 52 74 6c 70 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 5f 5f | ueKey.__imp_RtlpNtSetValueKey.__ |
| 224a0 | 69 6d 70 5f 52 74 6c 70 55 6e 57 61 69 74 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f 5f | imp_RtlpUnWaitCriticalSection.__ |
| 224c0 | 69 6d 70 5f 52 74 6c 70 57 61 69 74 46 6f 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 5f | imp_RtlpWaitForCriticalSection._ |
| 224e0 | 5f 69 6d 70 5f 52 74 6c 78 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 | _imp_RtlxAnsiStringToUnicodeSize |
| 22500 | 00 5f 5f 69 6d 70 5f 52 74 6c 78 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a | .__imp_RtlxOemStringToUnicodeSiz |
| 22520 | 65 00 5f 5f 69 6d 70 5f 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 | e.__imp_RtlxUnicodeStringToAnsiS |
| 22540 | 69 7a 65 00 5f 5f 69 6d 70 5f 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d | ize.__imp_RtlxUnicodeStringToOem |
| 22560 | 53 69 7a 65 00 5f 5f 69 6d 70 5f 56 65 72 53 65 74 43 6f 6e 64 69 74 69 6f 6e 4d 61 73 6b 00 5f | Size.__imp_VerSetConditionMask._ |
| 22580 | 5f 69 6d 70 5f 5a 77 41 63 63 65 70 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a | _imp_ZwAcceptConnectPort.__imp_Z |
| 225a0 | 77 41 63 63 65 73 73 43 68 65 63 6b 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b | wAccessCheck.__imp_ZwAccessCheck |
| 225c0 | 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 | AndAuditAlarm.__imp_ZwAccessChec |
| 225e0 | 6b 42 79 54 79 70 65 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 | kByType.__imp_ZwAccessCheckByTyp |
| 22600 | 65 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 | eAndAuditAlarm.__imp_ZwAccessChe |
| 22620 | 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 | ckByTypeResultList.__imp_ZwAcces |
| 22640 | 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c | sCheckByTypeResultListAndAuditAl |
| 22660 | 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 | arm.__imp_ZwAccessCheckByTypeRes |
| 22680 | 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 00 5f 5f 69 | ultListAndAuditAlarmByHandle.__i |
| 226a0 | 6d 70 5f 5a 77 41 64 64 41 74 6f 6d 00 5f 5f 69 6d 70 5f 5a 77 41 64 64 42 6f 6f 74 45 6e 74 72 | mp_ZwAddAtom.__imp_ZwAddBootEntr |
| 226c0 | 79 00 5f 5f 69 6d 70 5f 5a 77 41 64 64 44 72 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a | y.__imp_ZwAddDriverEntry.__imp_Z |
| 226e0 | 77 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 41 64 6a 75 73 | wAdjustGroupsToken.__imp_ZwAdjus |
| 22700 | 74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 41 6c 65 72 74 52 65 | tPrivilegesToken.__imp_ZwAlertRe |
| 22720 | 73 75 6d 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 41 6c 65 72 74 54 68 72 65 61 64 00 5f | sumeThread.__imp_ZwAlertThread._ |
| 22740 | 5f 69 6d 70 5f 5a 77 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 00 5f | _imp_ZwAllocateLocallyUniqueId._ |
| 22760 | 5f 69 6d 70 5f 5a 77 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 | _imp_ZwAllocateUserPhysicalPages |
| 22780 | 00 5f 5f 69 6d 70 5f 5a 77 41 6c 6c 6f 63 61 74 65 55 75 69 64 73 00 5f 5f 69 6d 70 5f 5a 77 41 | .__imp_ZwAllocateUuids.__imp_ZwA |
| 227a0 | 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 41 70 70 | llocateVirtualMemory.__imp_ZwApp |
| 227c0 | 68 65 6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 5a 77 41 72 65 4d 61 70 70 | helpCacheControl.__imp_ZwAreMapp |
| 227e0 | 65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 00 5f 5f 69 6d 70 5f 5a 77 41 73 73 69 67 6e 50 72 6f | edFilesTheSame.__imp_ZwAssignPro |
| 22800 | 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 61 6c 6c 62 61 63 6b | cessToJobObject.__imp_ZwCallback |
| 22820 | 52 65 74 75 72 6e 00 5f 5f 69 6d 70 5f 5a 77 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 | Return.__imp_ZwCancelDeviceWakeu |
| 22840 | 70 52 65 71 75 65 73 74 00 5f 5f 69 6d 70 5f 5a 77 43 61 6e 63 65 6c 49 6f 46 69 6c 65 00 5f 5f | pRequest.__imp_ZwCancelIoFile.__ |
| 22860 | 69 6d 70 5f 5a 77 43 61 6e 63 65 6c 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 43 6c 65 61 72 45 | imp_ZwCancelTimer.__imp_ZwClearE |
| 22880 | 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 43 6c 6f 73 65 00 5f 5f 69 6d 70 5f 5a 77 43 6c 6f 73 65 | vent.__imp_ZwClose.__imp_ZwClose |
| 228a0 | 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 43 6f 6d 70 61 63 74 | ObjectAuditAlarm.__imp_ZwCompact |
| 228c0 | 4b 65 79 73 00 5f 5f 69 6d 70 5f 5a 77 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 5f 5f 69 6d 70 | Keys.__imp_ZwCompareTokens.__imp |
| 228e0 | 5f 5a 77 43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 43 | _ZwCompleteConnectPort.__imp_ZwC |
| 22900 | 6f 6d 70 72 65 73 73 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f | ompressKey.__imp_ZwConnectPort._ |
| 22920 | 5f 69 6d 70 5f 5a 77 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 44 65 | _imp_ZwContinue.__imp_ZwCreateDe |
| 22940 | 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 | bugObject.__imp_ZwCreateDirector |
| 22960 | 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 45 76 65 6e 74 00 5f 5f 69 6d | yObject.__imp_ZwCreateEvent.__im |
| 22980 | 70 5f 5a 77 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 | p_ZwCreateEventPair.__imp_ZwCrea |
| 229a0 | 74 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f | teFile.__imp_ZwCreateIoCompletio |
| 229c0 | 6e 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f | n.__imp_ZwCreateJobObject.__imp_ |
| 229e0 | 5a 77 43 72 65 61 74 65 4a 6f 62 53 65 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 4b 65 79 | ZwCreateJobSet.__imp_ZwCreateKey |
| 22a00 | 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f | .__imp_ZwCreateKeyedEvent.__imp_ |
| 22a20 | 5a 77 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 | ZwCreateMailslotFile.__imp_ZwCre |
| 22a40 | 61 74 65 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 | ateMutant.__imp_ZwCreateNamedPip |
| 22a60 | 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 50 61 67 69 6e 67 46 69 6c 65 00 5f | eFile.__imp_ZwCreatePagingFile._ |
| 22a80 | 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 | _imp_ZwCreatePort.__imp_ZwCreate |
| 22aa0 | 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 78 00 | Process.__imp_ZwCreateProcessEx. |
| 22ac0 | 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 | __imp_ZwCreateProfile.__imp_ZwCr |
| 22ae0 | 65 61 74 65 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 53 65 6d 61 70 68 | eateSection.__imp_ZwCreateSemaph |
| 22b00 | 6f 72 65 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 | ore.__imp_ZwCreateSymbolicLinkOb |
| 22b20 | 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f | ject.__imp_ZwCreateThread.__imp_ |
| 22b40 | 5a 77 43 72 65 61 74 65 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 54 6f 6b 65 | ZwCreateTimer.__imp_ZwCreateToke |
| 22b60 | 6e 00 5f 5f 69 6d 70 5f 5a 77 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f 72 74 00 5f 5f 69 | n.__imp_ZwCreateWaitablePort.__i |
| 22b80 | 6d 70 5f 5a 77 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 | mp_ZwDebugActiveProcess.__imp_Zw |
| 22ba0 | 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 61 79 45 78 65 63 75 | DebugContinue.__imp_ZwDelayExecu |
| 22bc0 | 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 41 74 6f 6d 00 5f 5f 69 6d 70 5f 5a 77 | tion.__imp_ZwDeleteAtom.__imp_Zw |
| 22be0 | 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 44 72 | DeleteBootEntry.__imp_ZwDeleteDr |
| 22c00 | 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 46 69 6c 65 00 5f 5f 69 | iverEntry.__imp_ZwDeleteFile.__i |
| 22c20 | 6d 70 5f 5a 77 44 65 6c 65 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 4f 62 6a | mp_ZwDeleteKey.__imp_ZwDeleteObj |
| 22c40 | 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 44 65 6c 65 74 65 56 61 6c 75 | ectAuditAlarm.__imp_ZwDeleteValu |
| 22c60 | 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 44 65 76 69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65 | eKey.__imp_ZwDeviceIoControlFile |
| 22c80 | 00 5f 5f 69 6d 70 5f 5a 77 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 5f 5f 69 6d 70 5f 5a 77 44 | .__imp_ZwDisplayString.__imp_ZwD |
| 22ca0 | 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 44 75 70 6c 69 63 61 74 65 | uplicateObject.__imp_ZwDuplicate |
| 22cc0 | 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 | Token.__imp_ZwEnumerateBootEntri |
| 22ce0 | 65 73 00 5f 5f 69 6d 70 5f 5a 77 45 6e 75 6d 65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69 65 | es.__imp_ZwEnumerateDriverEntrie |
| 22d00 | 73 00 5f 5f 69 6d 70 5f 5a 77 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 45 | s.__imp_ZwEnumerateKey.__imp_ZwE |
| 22d20 | 6e 75 6d 65 72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 | numerateSystemEnvironmentValuesE |
| 22d40 | 78 00 5f 5f 69 6d 70 5f 5a 77 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d | x.__imp_ZwEnumerateValueKey.__im |
| 22d60 | 70 5f 5a 77 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 46 69 6c 74 65 72 | p_ZwExtendSection.__imp_ZwFilter |
| 22d80 | 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 46 69 6e 64 41 74 6f 6d 00 5f 5f 69 6d 70 5f 5a 77 46 | Token.__imp_ZwFindAtom.__imp_ZwF |
| 22da0 | 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 46 6c 75 73 68 49 6e 73 | lushBuffersFile.__imp_ZwFlushIns |
| 22dc0 | 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 5f 5f 69 6d 70 5f 5a 77 46 6c 75 73 68 4b 65 79 00 5f | tructionCache.__imp_ZwFlushKey._ |
| 22de0 | 5f 69 6d 70 5f 5a 77 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f | _imp_ZwFlushVirtualMemory.__imp_ |
| 22e00 | 5a 77 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72 00 5f 5f 69 6d 70 5f 5a 77 46 72 65 65 55 | ZwFlushWriteBuffer.__imp_ZwFreeU |
| 22e20 | 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 5f 5f 69 6d 70 5f 5a 77 46 72 65 65 56 69 72 | serPhysicalPages.__imp_ZwFreeVir |
| 22e40 | 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 | tualMemory.__imp_ZwFsControlFile |
| 22e60 | 00 5f 5f 69 6d 70 5f 5a 77 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f | .__imp_ZwGetContextThread.__imp_ |
| 22e80 | 5a 77 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 5f 5f 69 6d | ZwGetCurrentProcessorNumber.__im |
| 22ea0 | 70 5f 5a 77 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 5a 77 | p_ZwGetDevicePowerState.__imp_Zw |
| 22ec0 | 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 47 65 74 57 72 69 74 | GetPlugPlayEvent.__imp_ZwGetWrit |
| 22ee0 | 65 57 61 74 63 68 00 5f 5f 69 6d 70 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d | eWatch.__imp_ZwImpersonateAnonym |
| 22f00 | 6f 75 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 | ousToken.__imp_ZwImpersonateClie |
| 22f20 | 6e 74 4f 66 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 | ntOfPort.__imp_ZwImpersonateThre |
| 22f40 | 61 64 00 5f 5f 69 6d 70 5f 5a 77 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74 72 79 00 5f 5f | ad.__imp_ZwInitializeRegistry.__ |
| 22f60 | 69 6d 70 5f 5a 77 49 6e 69 74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f | imp_ZwInitiatePowerAction.__imp_ |
| 22f80 | 5a 77 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f 62 00 5f 5f 69 6d 70 5f 5a 77 49 73 53 79 73 74 65 | ZwIsProcessInJob.__imp_ZwIsSyste |
| 22fa0 | 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 5f 5f 69 6d 70 5f 5a 77 4c 69 73 74 65 6e 50 | mResumeAutomatic.__imp_ZwListenP |
| 22fc0 | 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 61 64 44 72 69 76 65 72 00 5f 5f 69 6d 70 5f 5a 77 4c | ort.__imp_ZwLoadDriver.__imp_ZwL |
| 22fe0 | 6f 61 64 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 61 64 4b 65 79 32 00 5f 5f 69 6d 70 5f 5a 77 | oadKey.__imp_ZwLoadKey2.__imp_Zw |
| 23000 | 4c 6f 61 64 4b 65 79 45 78 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 63 6b 46 69 6c 65 00 5f 5f 69 6d 70 | LoadKeyEx.__imp_ZwLockFile.__imp |
| 23020 | 5f 5a 77 4c 6f 63 6b 50 72 6f 64 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 5f 5f 69 | _ZwLockProductActivationKeys.__i |
| 23040 | 6d 70 5f 5a 77 4c 6f 63 6b 52 65 67 69 73 74 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 4c 6f 63 | mp_ZwLockRegistryKey.__imp_ZwLoc |
| 23060 | 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 4d 61 6b 65 50 65 72 6d 61 | kVirtualMemory.__imp_ZwMakePerma |
| 23080 | 6e 65 6e 74 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 | nentObject.__imp_ZwMakeTemporary |
| 230a0 | 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 | Object.__imp_ZwMapUserPhysicalPa |
| 230c0 | 67 65 73 00 5f 5f 69 6d 70 5f 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 | ges.__imp_ZwMapUserPhysicalPages |
| 230e0 | 53 63 61 74 74 65 72 00 5f 5f 69 6d 70 5f 5a 77 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e | Scatter.__imp_ZwMapViewOfSection |
| 23100 | 00 5f 5f 69 6d 70 5f 5a 77 4d 6f 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a | .__imp_ZwModifyBootEntry.__imp_Z |
| 23120 | 77 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72 79 00 5f 5f 69 6d 70 5f 5a 77 4e 6f 74 69 66 | wModifyDriverEntry.__imp_ZwNotif |
| 23140 | 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 4e 6f 74 | yChangeDirectoryFile.__imp_ZwNot |
| 23160 | 69 66 79 43 68 61 6e 67 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 | ifyChangeKey.__imp_ZwNotifyChang |
| 23180 | 65 4d 75 6c 74 69 70 6c 65 4b 65 79 73 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 44 69 72 65 63 74 | eMultipleKeys.__imp_ZwOpenDirect |
| 231a0 | 6f 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 45 76 65 6e 74 00 5f 5f 69 6d | oryObject.__imp_ZwOpenEvent.__im |
| 231c0 | 70 5f 5a 77 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 46 69 | p_ZwOpenEventPair.__imp_ZwOpenFi |
| 231e0 | 6c 65 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 5f 5f 69 6d | le.__imp_ZwOpenIoCompletion.__im |
| 23200 | 70 5f 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 4b 65 | p_ZwOpenJobObject.__imp_ZwOpenKe |
| 23220 | 79 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a | y.__imp_ZwOpenKeyedEvent.__imp_Z |
| 23240 | 77 4f 70 65 6e 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 4f 62 6a 65 63 74 41 75 | wOpenMutant.__imp_ZwOpenObjectAu |
| 23260 | 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 00 5f 5f 69 | ditAlarm.__imp_ZwOpenProcess.__i |
| 23280 | 6d 70 5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 4f 70 | mp_ZwOpenProcessToken.__imp_ZwOp |
| 232a0 | 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 53 65 63 | enProcessTokenEx.__imp_ZwOpenSec |
| 232c0 | 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 | tion.__imp_ZwOpenSemaphore.__imp |
| 232e0 | 5f 5a 77 4f 70 65 6e 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f | _ZwOpenSymbolicLinkObject.__imp_ |
| 23300 | 5a 77 4f 70 65 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 | ZwOpenThread.__imp_ZwOpenThreadT |
| 23320 | 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 45 78 00 5f | oken.__imp_ZwOpenThreadTokenEx._ |
| 23340 | 5f 69 6d 70 5f 5a 77 4f 70 65 6e 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 50 6c 75 67 50 6c 61 | _imp_ZwOpenTimer.__imp_ZwPlugPla |
| 23360 | 79 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 5f 5a 77 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f | yControl.__imp_ZwPowerInformatio |
| 23380 | 6e 00 5f 5f 69 6d 70 5f 5a 77 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 00 5f 5f 69 6d 70 5f 5a | n.__imp_ZwPrivilegeCheck.__imp_Z |
| 233a0 | 77 50 72 69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 5f 5f 69 6d 70 | wPrivilegeObjectAuditAlarm.__imp |
| 233c0 | 5f 5a 77 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 00 5f | _ZwPrivilegedServiceAuditAlarm._ |
| 233e0 | 5f 69 6d 70 5f 5a 77 50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d | _imp_ZwProtectVirtualMemory.__im |
| 23400 | 70 5f 5a 77 50 75 6c 73 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 41 74 74 72 | p_ZwPulseEvent.__imp_ZwQueryAttr |
| 23420 | 69 62 75 74 65 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 42 6f 6f 74 45 6e 74 72 | ibutesFile.__imp_ZwQueryBootEntr |
| 23440 | 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 | yOrder.__imp_ZwQueryBootOptions. |
| 23460 | 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f | __imp_ZwQueryDebugFilterState.__ |
| 23480 | 69 6d 70 5f 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5f 5f 69 6d 70 5f 5a | imp_ZwQueryDefaultLocale.__imp_Z |
| 234a0 | 77 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 5a 77 | wQueryDefaultUILanguage.__imp_Zw |
| 234c0 | 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 | QueryDirectoryFile.__imp_ZwQuery |
| 234e0 | 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 44 72 69 | DirectoryObject.__imp_ZwQueryDri |
| 23500 | 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 45 61 46 69 6c | verEntryOrder.__imp_ZwQueryEaFil |
| 23520 | 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 | e.__imp_ZwQueryEvent.__imp_ZwQue |
| 23540 | 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 | ryFullAttributesFile.__imp_ZwQue |
| 23560 | 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 | ryInformationAtom.__imp_ZwQueryI |
| 23580 | 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 66 6f | nformationFile.__imp_ZwQueryInfo |
| 235a0 | 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e | rmationJobObject.__imp_ZwQueryIn |
| 235c0 | 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 66 6f 72 | formationPort.__imp_ZwQueryInfor |
| 235e0 | 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 66 6f 72 | mationProcess.__imp_ZwQueryInfor |
| 23600 | 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d | mationThread.__imp_ZwQueryInform |
| 23620 | 61 74 69 6f 6e 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 | ationToken.__imp_ZwQueryInstallU |
| 23640 | 49 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 | ILanguage.__imp_ZwQueryIntervalP |
| 23660 | 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e | rofile.__imp_ZwQueryIoCompletion |
| 23680 | 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 4d | .__imp_ZwQueryKey.__imp_ZwQueryM |
| 236a0 | 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 4d 75 74 | ultipleValueKey.__imp_ZwQueryMut |
| 236c0 | 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 | ant.__imp_ZwQueryObject.__imp_Zw |
| 236e0 | 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 4f 70 | QueryOpenSubKeys.__imp_ZwQueryOp |
| 23700 | 65 6e 53 75 62 4b 65 79 73 45 78 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 50 65 72 66 6f 72 6d | enSubKeysEx.__imp_ZwQueryPerform |
| 23720 | 61 6e 63 65 43 6f 75 6e 74 65 72 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 50 6f 72 74 49 6e 66 | anceCounter.__imp_ZwQueryPortInf |
| 23740 | 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 51 75 6f | ormationProcess.__imp_ZwQueryQuo |
| 23760 | 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 | taInformationFile.__imp_ZwQueryS |
| 23780 | 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 | ection.__imp_ZwQuerySecurityObje |
| 237a0 | 63 74 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f | ct.__imp_ZwQuerySemaphore.__imp_ |
| 237c0 | 5a 77 51 75 65 72 79 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f | ZwQuerySymbolicLinkObject.__imp_ |
| 237e0 | 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5f 5f | ZwQuerySystemEnvironmentValue.__ |
| 23800 | 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 | imp_ZwQuerySystemEnvironmentValu |
| 23820 | 65 45 78 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 | eEx.__imp_ZwQuerySystemInformati |
| 23840 | 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d 65 00 5f 5f 69 6d 70 | on.__imp_ZwQuerySystemTime.__imp |
| 23860 | 5f 5a 77 51 75 65 72 79 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 54 69 6d 65 72 | _ZwQueryTimer.__imp_ZwQueryTimer |
| 23880 | 52 65 73 6f 6c 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 56 61 6c 75 65 4b 65 79 | Resolution.__imp_ZwQueryValueKey |
| 238a0 | 00 5f 5f 69 6d 70 5f 5a 77 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d | .__imp_ZwQueryVirtualMemory.__im |
| 238c0 | 70 5f 5a 77 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f | p_ZwQueryVolumeInformationFile._ |
| 238e0 | 5f 69 6d 70 5f 5a 77 51 75 65 75 65 41 70 63 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 52 61 | _imp_ZwQueueApcThread.__imp_ZwRa |
| 23900 | 69 73 65 45 78 63 65 70 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 52 61 69 73 65 48 61 72 64 45 72 | iseException.__imp_ZwRaiseHardEr |
| 23920 | 72 6f 72 00 5f 5f 69 6d 70 5f 5a 77 52 65 61 64 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 52 65 61 | ror.__imp_ZwReadFile.__imp_ZwRea |
| 23940 | 64 46 69 6c 65 53 63 61 74 74 65 72 00 5f 5f 69 6d 70 5f 5a 77 52 65 61 64 52 65 71 75 65 73 74 | dFileScatter.__imp_ZwReadRequest |
| 23960 | 44 61 74 61 00 5f 5f 69 6d 70 5f 5a 77 52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f | Data.__imp_ZwReadVirtualMemory._ |
| 23980 | 5f 69 6d 70 5f 5a 77 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f | _imp_ZwRegisterThreadTerminatePo |
| 239a0 | 72 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 | rt.__imp_ZwReleaseKeyedEvent.__i |
| 239c0 | 6d 70 5f 5a 77 52 65 6c 65 61 73 65 4d 75 74 61 6e 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 6c 65 61 | mp_ZwReleaseMutant.__imp_ZwRelea |
| 239e0 | 73 65 53 65 6d 61 70 68 6f 72 65 00 5f 5f 69 6d 70 5f 5a 77 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 | seSemaphore.__imp_ZwRemoveIoComp |
| 23a00 | 6c 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75 | letion.__imp_ZwRemoveProcessDebu |
| 23a20 | 67 00 5f 5f 69 6d 70 5f 5a 77 52 65 6e 61 6d 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 52 65 70 6c | g.__imp_ZwRenameKey.__imp_ZwRepl |
| 23a40 | 61 63 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a | aceKey.__imp_ZwReplyPort.__imp_Z |
| 23a60 | 77 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 | wReplyWaitReceivePort.__imp_ZwRe |
| 23a80 | 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78 00 5f 5f 69 6d 70 5f 5a 77 52 65 70 | plyWaitReceivePortEx.__imp_ZwRep |
| 23aa0 | 6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 71 75 65 73 74 44 | lyWaitReplyPort.__imp_ZwRequestD |
| 23ac0 | 65 76 69 63 65 57 61 6b 65 75 70 00 5f 5f 69 6d 70 5f 5a 77 52 65 71 75 65 73 74 50 6f 72 74 00 | eviceWakeup.__imp_ZwRequestPort. |
| 23ae0 | 5f 5f 69 6d 70 5f 5a 77 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 5f 5f 69 | __imp_ZwRequestWaitReplyPort.__i |
| 23b00 | 6d 70 5f 5a 77 52 65 71 75 65 73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 5f 5f 69 6d 70 5f | mp_ZwRequestWakeupLatency.__imp_ |
| 23b20 | 5a 77 52 65 73 65 74 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 52 65 73 65 74 57 72 69 74 65 57 | ZwResetEvent.__imp_ZwResetWriteW |
| 23b40 | 61 74 63 68 00 5f 5f 69 6d 70 5f 5a 77 52 65 73 74 6f 72 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 | atch.__imp_ZwRestoreKey.__imp_Zw |
| 23b60 | 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 52 65 73 75 6d 65 54 68 72 65 | ResumeProcess.__imp_ZwResumeThre |
| 23b80 | 61 64 00 5f 5f 69 6d 70 5f 5a 77 53 61 76 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 53 61 76 65 4b | ad.__imp_ZwSaveKey.__imp_ZwSaveK |
| 23ba0 | 65 79 45 78 00 5f 5f 69 6d 70 5f 5a 77 53 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 5f 5f 69 6d | eyEx.__imp_ZwSaveMergedKeys.__im |
| 23bc0 | 70 5f 5a 77 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 | p_ZwSecureConnectPort.__imp_ZwSe |
| 23be0 | 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 42 6f 6f 74 4f | tBootEntryOrder.__imp_ZwSetBootO |
| 23c00 | 70 74 69 6f 6e 73 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 | ptions.__imp_ZwSetContextThread. |
| 23c20 | 5f 5f 69 6d 70 5f 5a 77 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 5f 5f 69 6d | __imp_ZwSetDebugFilterState.__im |
| 23c40 | 70 5f 5a 77 53 65 74 44 65 66 61 75 6c 74 48 61 72 64 45 72 72 6f 72 50 6f 72 74 00 5f 5f 69 6d | p_ZwSetDefaultHardErrorPort.__im |
| 23c60 | 70 5f 5a 77 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 | p_ZwSetDefaultLocale.__imp_ZwSet |
| 23c80 | 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 44 72 69 | DefaultUILanguage.__imp_ZwSetDri |
| 23ca0 | 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 45 61 46 69 6c 65 00 | verEntryOrder.__imp_ZwSetEaFile. |
| 23cc0 | 5f 5f 69 6d 70 5f 5a 77 53 65 74 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 45 76 65 6e | __imp_ZwSetEvent.__imp_ZwSetEven |
| 23ce0 | 74 42 6f 6f 73 74 50 72 69 6f 72 69 74 79 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 48 69 67 68 45 76 | tBoostPriority.__imp_ZwSetHighEv |
| 23d00 | 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 | entPair.__imp_ZwSetHighWaitLowEv |
| 23d20 | 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 44 65 | entPair.__imp_ZwSetInformationDe |
| 23d40 | 62 75 67 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e | bugObject.__imp_ZwSetInformation |
| 23d60 | 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 | File.__imp_ZwSetInformationJobOb |
| 23d80 | 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65 79 00 5f | ject.__imp_ZwSetInformationKey._ |
| 23da0 | 5f 69 6d 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 5f 5f 69 6d | _imp_ZwSetInformationObject.__im |
| 23dc0 | 70 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f | p_ZwSetInformationProcess.__imp_ |
| 23de0 | 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 53 | ZwSetInformationThread.__imp_ZwS |
| 23e00 | 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6e | etInformationToken.__imp_ZwSetIn |
| 23e20 | 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 49 6f 43 6f 6d 70 6c | tervalProfile.__imp_ZwSetIoCompl |
| 23e40 | 65 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 4c 64 74 45 6e 74 72 69 65 73 00 5f 5f 69 6d | etion.__imp_ZwSetLdtEntries.__im |
| 23e60 | 70 5f 5a 77 53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 4c | p_ZwSetLowEventPair.__imp_ZwSetL |
| 23e80 | 6f 77 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 51 | owWaitHighEventPair.__imp_ZwSetQ |
| 23ea0 | 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 | uotaInformationFile.__imp_ZwSetS |
| 23ec0 | 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 79 73 74 65 6d 45 | ecurityObject.__imp_ZwSetSystemE |
| 23ee0 | 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 79 73 74 65 | nvironmentValue.__imp_ZwSetSyste |
| 23f00 | 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 | mEnvironmentValueEx.__imp_ZwSetS |
| 23f20 | 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 79 73 74 | ystemInformation.__imp_ZwSetSyst |
| 23f40 | 65 6d 50 6f 77 65 72 53 74 61 74 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 53 79 73 74 65 6d 54 69 | emPowerState.__imp_ZwSetSystemTi |
| 23f60 | 6d 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 61 | me.__imp_ZwSetThreadExecutionSta |
| 23f80 | 74 65 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 54 69 6d 65 72 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 54 | te.__imp_ZwSetTimer.__imp_ZwSetT |
| 23fa0 | 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 55 75 69 64 53 65 | imerResolution.__imp_ZwSetUuidSe |
| 23fc0 | 65 64 00 5f 5f 69 6d 70 5f 5a 77 53 65 74 56 61 6c 75 65 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 53 | ed.__imp_ZwSetValueKey.__imp_ZwS |
| 23fe0 | 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 | etVolumeInformationFile.__imp_Zw |
| 24000 | 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 00 5f 5f 69 6d 70 5f 5a 77 53 69 67 6e 61 6c 41 6e 64 | ShutdownSystem.__imp_ZwSignalAnd |
| 24020 | 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 53 74 61 72 | WaitForSingleObject.__imp_ZwStar |
| 24040 | 74 50 72 6f 66 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 53 74 6f 70 50 72 6f 66 69 6c 65 00 5f 5f 69 | tProfile.__imp_ZwStopProfile.__i |
| 24060 | 6d 70 5f 5a 77 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a 77 53 75 73 70 | mp_ZwSuspendProcess.__imp_ZwSusp |
| 24080 | 65 6e 64 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e | endThread.__imp_ZwSystemDebugCon |
| 240a0 | 74 72 6f 6c 00 5f 5f 69 6d 70 5f 5a 77 54 65 72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 | trol.__imp_ZwTerminateJobObject. |
| 240c0 | 5f 5f 69 6d 70 5f 5a 77 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 5f 5f 69 6d 70 5f 5a | __imp_ZwTerminateProcess.__imp_Z |
| 240e0 | 77 54 65 72 6d 69 6e 61 74 65 54 68 72 65 61 64 00 5f 5f 69 6d 70 5f 5a 77 54 65 73 74 41 6c 65 | wTerminateThread.__imp_ZwTestAle |
| 24100 | 72 74 00 5f 5f 69 6d 70 5f 5a 77 54 72 61 63 65 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 54 72 | rt.__imp_ZwTraceEvent.__imp_ZwTr |
| 24120 | 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 61 64 44 72 | anslateFilePath.__imp_ZwUnloadDr |
| 24140 | 69 76 65 72 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 00 5f 5f 69 6d 70 5f 5a 77 55 | iver.__imp_ZwUnloadKey.__imp_ZwU |
| 24160 | 6e 6c 6f 61 64 4b 65 79 32 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 45 78 00 5f 5f | nloadKey2.__imp_ZwUnloadKeyEx.__ |
| 24180 | 69 6d 70 5f 5a 77 55 6e 6c 6f 63 6b 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6c 6f 63 6b 56 | imp_ZwUnlockFile.__imp_ZwUnlockV |
| 241a0 | 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d 70 5f 5a 77 55 6e 6d 61 70 56 69 65 77 4f 66 | irtualMemory.__imp_ZwUnmapViewOf |
| 241c0 | 53 65 63 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5a 77 56 64 6d 43 6f 6e 74 72 6f 6c 00 5f 5f 69 6d 70 | Section.__imp_ZwVdmControl.__imp |
| 241e0 | 5f 5a 77 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 | _ZwWaitForDebugEvent.__imp_ZwWai |
| 24200 | 74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 46 6f 72 4d 75 | tForKeyedEvent.__imp_ZwWaitForMu |
| 24220 | 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 46 6f 72 4d 75 6c | ltipleObjects.__imp_ZwWaitForMul |
| 24240 | 74 69 70 6c 65 4f 62 6a 65 63 74 73 33 32 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 46 6f 72 53 69 | tipleObjects32.__imp_ZwWaitForSi |
| 24260 | 6e 67 6c 65 4f 62 6a 65 63 74 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 48 69 67 68 45 76 65 6e 74 | ngleObject.__imp_ZwWaitHighEvent |
| 24280 | 50 61 69 72 00 5f 5f 69 6d 70 5f 5a 77 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 5f 5f | Pair.__imp_ZwWaitLowEventPair.__ |
| 242a0 | 69 6d 70 5f 5a 77 57 72 69 74 65 46 69 6c 65 00 5f 5f 69 6d 70 5f 5a 77 57 72 69 74 65 46 69 6c | imp_ZwWriteFile.__imp_ZwWriteFil |
| 242c0 | 65 47 61 74 68 65 72 00 5f 5f 69 6d 70 5f 5a 77 57 72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 | eGather.__imp_ZwWriteRequestData |
| 242e0 | 00 5f 5f 69 6d 70 5f 5a 77 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 5f 5f 69 6d | .__imp_ZwWriteVirtualMemory.__im |
| 24300 | 70 5f 5a 77 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 00 5f 5f 69 6d 70 5f 5f 5f 43 5f 73 70 65 | p_ZwYieldExecution.__imp___C_spe |
| 24320 | 63 69 66 69 63 5f 68 61 6e 64 6c 65 72 00 5f 5f 69 6d 70 5f 5f 5f 63 68 6b 73 74 6b 00 5f 5f 69 | cific_handler.__imp___chkstk.__i |
| 24340 | 6d 70 5f 5f 5f 69 73 61 73 63 69 69 00 5f 5f 69 6d 70 5f 5f 5f 69 73 63 73 79 6d 00 5f 5f 69 6d | mp___isascii.__imp___iscsym.__im |
| 24360 | 70 5f 5f 5f 69 73 63 73 79 6d 66 00 5f 5f 69 6d 70 5f 5f 5f 6d 69 73 61 6c 69 67 6e 65 64 5f 61 | p___iscsymf.__imp___misaligned_a |
| 24380 | 63 63 65 73 73 00 5f 5f 69 6d 70 5f 5f 5f 74 6f 61 73 63 69 69 00 5f 5f 69 6d 70 5f 5f 61 74 6f | ccess.__imp___toascii.__imp__ato |
| 243a0 | 69 36 34 00 5f 5f 69 6d 70 5f 5f 66 6c 74 75 73 65 64 00 5f 5f 69 6d 70 5f 5f 69 36 34 74 6f 61 | i64.__imp__fltused.__imp__i64toa |
| 243c0 | 00 5f 5f 69 6d 70 5f 5f 69 36 34 74 6f 77 00 5f 5f 69 6d 70 5f 5f 69 74 6f 61 00 5f 5f 69 6d 70 | .__imp__i64tow.__imp__itoa.__imp |
| 243e0 | 5f 5f 69 74 6f 77 00 5f 5f 69 6d 70 5f 5f 6c 66 69 6e 64 00 5f 5f 69 6d 70 5f 5f 6c 6f 63 61 6c | __itow.__imp__lfind.__imp__local |
| 24400 | 5f 75 6e 77 69 6e 64 00 5f 5f 69 6d 70 5f 5f 6c 74 6f 61 00 5f 5f 69 6d 70 5f 5f 6c 74 6f 77 00 | _unwind.__imp__ltoa.__imp__ltow. |
| 24420 | 5f 5f 69 6d 70 5f 5f 6d 65 6d 63 63 70 79 00 5f 5f 69 6d 70 5f 5f 6d 65 6d 69 63 6d 70 00 5f 5f | __imp__memccpy.__imp__memicmp.__ |
| 24440 | 69 6d 70 5f 5f 73 65 74 6a 6d 70 00 5f 5f 69 6d 70 5f 5f 73 65 74 6a 6d 70 65 78 00 5f 5f 69 6d | imp__setjmp.__imp__setjmpex.__im |
| 24460 | 70 5f 5f 73 6e 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 73 6e 77 70 72 69 6e 74 66 00 5f 5f 69 | p__snprintf.__imp__snwprintf.__i |
| 24480 | 6d 70 5f 5f 73 70 6c 69 74 70 61 74 68 00 5f 5f 69 6d 70 5f 5f 73 74 72 63 6d 70 69 00 5f 5f 69 | mp__splitpath.__imp__strcmpi.__i |
| 244a0 | 6d 70 5f 5f 73 74 72 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 73 74 72 6c 77 72 00 5f 5f 69 6d 70 5f | mp__stricmp.__imp__strlwr.__imp_ |
| 244c0 | 5f 73 74 72 6e 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 73 74 72 75 70 72 00 5f 5f 69 6d 70 5f 5f 74 | _strnicmp.__imp__strupr.__imp__t |
| 244e0 | 6f 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 74 6f 75 70 70 65 72 00 5f 5f 69 6d 70 5f 5f 75 69 36 | olower.__imp__toupper.__imp__ui6 |
| 24500 | 34 74 6f 61 00 5f 5f 69 6d 70 5f 5f 75 69 36 34 74 6f 77 00 5f 5f 69 6d 70 5f 5f 75 6c 74 6f 61 | 4toa.__imp__ui64tow.__imp__ultoa |
| 24520 | 00 5f 5f 69 6d 70 5f 5f 75 6c 74 6f 77 00 5f 5f 69 6d 70 5f 5f 76 73 63 77 70 72 69 6e 74 66 00 | .__imp__ultow.__imp__vscwprintf. |
| 24540 | 5f 5f 69 6d 70 5f 5f 76 73 6e 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 76 73 6e 77 70 72 69 6e | __imp__vsnprintf.__imp__vsnwprin |
| 24560 | 74 66 00 5f 5f 69 6d 70 5f 5f 77 63 73 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 77 63 73 6c 77 72 00 | tf.__imp__wcsicmp.__imp__wcslwr. |
| 24580 | 5f 5f 69 6d 70 5f 5f 77 63 73 6e 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 77 63 73 74 6f 75 69 36 34 | __imp__wcsnicmp.__imp__wcstoui64 |
| 245a0 | 00 5f 5f 69 6d 70 5f 5f 77 63 73 75 70 72 00 5f 5f 69 6d 70 5f 5f 77 74 6f 69 00 5f 5f 69 6d 70 | .__imp__wcsupr.__imp__wtoi.__imp |
| 245c0 | 5f 5f 77 74 6f 69 36 34 00 5f 5f 69 6d 70 5f 5f 77 74 6f 6c 00 5f 5f 69 6d 70 5f 61 62 73 00 5f | __wtoi64.__imp__wtol.__imp_abs._ |
| 245e0 | 5f 69 6d 70 5f 61 74 61 6e 00 5f 5f 69 6d 70 5f 61 74 6f 69 00 5f 5f 69 6d 70 5f 61 74 6f 6c 00 | _imp_atan.__imp_atoi.__imp_atol. |
| 24600 | 5f 5f 69 6d 70 5f 62 73 65 61 72 63 68 00 5f 5f 69 6d 70 5f 63 65 69 6c 00 5f 5f 69 6d 70 5f 63 | __imp_bsearch.__imp_ceil.__imp_c |
| 24620 | 6f 73 00 5f 5f 69 6d 70 5f 66 61 62 73 00 5f 5f 69 6d 70 5f 66 6c 6f 6f 72 00 5f 5f 69 6d 70 5f | os.__imp_fabs.__imp_floor.__imp_ |
| 24640 | 69 73 61 6c 6e 75 6d 00 5f 5f 69 6d 70 5f 69 73 61 6c 70 68 61 00 5f 5f 69 6d 70 5f 69 73 63 6e | isalnum.__imp_isalpha.__imp_iscn |
| 24660 | 74 72 6c 00 5f 5f 69 6d 70 5f 69 73 64 69 67 69 74 00 5f 5f 69 6d 70 5f 69 73 67 72 61 70 68 00 | trl.__imp_isdigit.__imp_isgraph. |
| 24680 | 5f 5f 69 6d 70 5f 69 73 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 69 73 70 72 69 6e 74 00 5f 5f 69 6d | __imp_islower.__imp_isprint.__im |
| 246a0 | 70 5f 69 73 70 75 6e 63 74 00 5f 5f 69 6d 70 5f 69 73 73 70 61 63 65 00 5f 5f 69 6d 70 5f 69 73 | p_ispunct.__imp_isspace.__imp_is |
| 246c0 | 75 70 70 65 72 00 5f 5f 69 6d 70 5f 69 73 77 61 6c 70 68 61 00 5f 5f 69 6d 70 5f 69 73 77 63 74 | upper.__imp_iswalpha.__imp_iswct |
| 246e0 | 79 70 65 00 5f 5f 69 6d 70 5f 69 73 77 64 69 67 69 74 00 5f 5f 69 6d 70 5f 69 73 77 6c 6f 77 65 | ype.__imp_iswdigit.__imp_iswlowe |
| 24700 | 72 00 5f 5f 69 6d 70 5f 69 73 77 73 70 61 63 65 00 5f 5f 69 6d 70 5f 69 73 77 78 64 69 67 69 74 | r.__imp_iswspace.__imp_iswxdigit |
| 24720 | 00 5f 5f 69 6d 70 5f 69 73 78 64 69 67 69 74 00 5f 5f 69 6d 70 5f 6c 61 62 73 00 5f 5f 69 6d 70 | .__imp_isxdigit.__imp_labs.__imp |
| 24740 | 5f 6c 6f 67 00 5f 5f 69 6d 70 5f 6c 6f 6e 67 6a 6d 70 00 5f 5f 69 6d 70 5f 6d 62 73 74 6f 77 63 | _log.__imp_longjmp.__imp_mbstowc |
| 24760 | 73 00 5f 5f 69 6d 70 5f 6d 65 6d 63 68 72 00 5f 5f 69 6d 70 5f 6d 65 6d 63 6d 70 00 5f 5f 69 6d | s.__imp_memchr.__imp_memcmp.__im |
| 24780 | 70 5f 6d 65 6d 63 70 79 00 5f 5f 69 6d 70 5f 6d 65 6d 6d 6f 76 65 00 5f 5f 69 6d 70 5f 6d 65 6d | p_memcpy.__imp_memmove.__imp_mem |
| 247a0 | 73 65 74 00 5f 5f 69 6d 70 5f 70 6f 77 00 5f 5f 69 6d 70 5f 71 73 6f 72 74 00 5f 5f 69 6d 70 5f | set.__imp_pow.__imp_qsort.__imp_ |
| 247c0 | 73 69 6e 00 5f 5f 69 6d 70 5f 73 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 73 71 72 74 00 5f 5f 69 | sin.__imp_sprintf.__imp_sqrt.__i |
| 247e0 | 6d 70 5f 73 73 63 61 6e 66 00 5f 5f 69 6d 70 5f 73 74 72 63 61 74 00 5f 5f 69 6d 70 5f 73 74 72 | mp_sscanf.__imp_strcat.__imp_str |
| 24800 | 63 68 72 00 5f 5f 69 6d 70 5f 73 74 72 63 6d 70 00 5f 5f 69 6d 70 5f 73 74 72 63 70 79 00 5f 5f | chr.__imp_strcmp.__imp_strcpy.__ |
| 24820 | 69 6d 70 5f 73 74 72 63 73 70 6e 00 5f 5f 69 6d 70 5f 73 74 72 6c 65 6e 00 5f 5f 69 6d 70 5f 73 | imp_strcspn.__imp_strlen.__imp_s |
| 24840 | 74 72 6e 63 61 74 00 5f 5f 69 6d 70 5f 73 74 72 6e 63 6d 70 00 5f 5f 69 6d 70 5f 73 74 72 6e 63 | trncat.__imp_strncmp.__imp_strnc |
| 24860 | 70 79 00 5f 5f 69 6d 70 5f 73 74 72 70 62 72 6b 00 5f 5f 69 6d 70 5f 73 74 72 72 63 68 72 00 5f | py.__imp_strpbrk.__imp_strrchr._ |
| 24880 | 5f 69 6d 70 5f 73 74 72 73 70 6e 00 5f 5f 69 6d 70 5f 73 74 72 73 74 72 00 5f 5f 69 6d 70 5f 73 | _imp_strspn.__imp_strstr.__imp_s |
| 248a0 | 74 72 74 6f 6c 00 5f 5f 69 6d 70 5f 73 74 72 74 6f 75 6c 00 5f 5f 69 6d 70 5f 73 77 70 72 69 6e | trtol.__imp_strtoul.__imp_swprin |
| 248c0 | 74 66 00 5f 5f 69 6d 70 5f 74 61 6e 00 5f 5f 69 6d 70 5f 74 6f 6c 6f 77 65 72 00 5f 5f 69 6d 70 | tf.__imp_tan.__imp_tolower.__imp |
| 248e0 | 5f 74 6f 75 70 70 65 72 00 5f 5f 69 6d 70 5f 74 6f 77 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 74 6f | _toupper.__imp_towlower.__imp_to |
| 24900 | 77 75 70 70 65 72 00 5f 5f 69 6d 70 5f 76 44 62 67 50 72 69 6e 74 45 78 00 5f 5f 69 6d 70 5f 76 | wupper.__imp_vDbgPrintEx.__imp_v |
| 24920 | 44 62 67 50 72 69 6e 74 45 78 57 69 74 68 50 72 65 66 69 78 00 5f 5f 69 6d 70 5f 76 73 70 72 69 | DbgPrintExWithPrefix.__imp_vspri |
| 24940 | 6e 74 66 00 5f 5f 69 6d 70 5f 77 63 73 63 61 74 00 5f 5f 69 6d 70 5f 77 63 73 63 68 72 00 5f 5f | ntf.__imp_wcscat.__imp_wcschr.__ |
| 24960 | 69 6d 70 5f 77 63 73 63 6d 70 00 5f 5f 69 6d 70 5f 77 63 73 63 70 79 00 5f 5f 69 6d 70 5f 77 63 | imp_wcscmp.__imp_wcscpy.__imp_wc |
| 24980 | 73 63 73 70 6e 00 5f 5f 69 6d 70 5f 77 63 73 6c 65 6e 00 5f 5f 69 6d 70 5f 77 63 73 6e 63 61 74 | scspn.__imp_wcslen.__imp_wcsncat |
| 249a0 | 00 5f 5f 69 6d 70 5f 77 63 73 6e 63 6d 70 00 5f 5f 69 6d 70 5f 77 63 73 6e 63 70 79 00 5f 5f 69 | .__imp_wcsncmp.__imp_wcsncpy.__i |
| 249c0 | 6d 70 5f 77 63 73 70 62 72 6b 00 5f 5f 69 6d 70 5f 77 63 73 72 63 68 72 00 5f 5f 69 6d 70 5f 77 | mp_wcspbrk.__imp_wcsrchr.__imp_w |
| 249e0 | 63 73 73 70 6e 00 5f 5f 69 6d 70 5f 77 63 73 73 74 72 00 5f 5f 69 6d 70 5f 77 63 73 74 6f 6c 00 | csspn.__imp_wcsstr.__imp_wcstol. |
| 24a00 | 5f 5f 69 6d 70 5f 77 63 73 74 6f 6d 62 73 00 5f 5f 69 6d 70 5f 77 63 73 74 6f 75 6c 00 5f 5f 69 | __imp_wcstombs.__imp_wcstoul.__i |
| 24a20 | 73 61 73 63 69 69 00 5f 5f 69 73 63 73 79 6d 00 5f 5f 69 73 63 73 79 6d 66 00 5f 5f 6d 69 73 61 | sascii.__iscsym.__iscsymf.__misa |
| 24a40 | 6c 69 67 6e 65 64 5f 61 63 63 65 73 73 00 5f 5f 74 6f 61 73 63 69 69 00 5f 61 74 6f 69 36 34 00 | ligned_access.__toascii._atoi64. |
| 24a60 | 5f 66 6c 74 75 73 65 64 00 5f 69 36 34 74 6f 61 00 5f 69 36 34 74 6f 77 00 5f 69 74 6f 61 00 5f | _fltused._i64toa._i64tow._itoa._ |
| 24a80 | 69 74 6f 77 00 5f 6c 66 69 6e 64 00 5f 6c 6f 63 61 6c 5f 75 6e 77 69 6e 64 00 5f 6c 74 6f 61 00 | itow._lfind._local_unwind._ltoa. |
| 24aa0 | 5f 6c 74 6f 77 00 5f 6d 65 6d 63 63 70 79 00 5f 6d 65 6d 69 63 6d 70 00 5f 73 65 74 6a 6d 70 00 | _ltow._memccpy._memicmp._setjmp. |
| 24ac0 | 5f 73 65 74 6a 6d 70 65 78 00 5f 73 6e 70 72 69 6e 74 66 00 5f 73 6e 77 70 72 69 6e 74 66 00 5f | _setjmpex._snprintf._snwprintf._ |
| 24ae0 | 73 70 6c 69 74 70 61 74 68 00 5f 73 74 72 63 6d 70 69 00 5f 73 74 72 69 63 6d 70 00 5f 73 74 72 | splitpath._strcmpi._stricmp._str |
| 24b00 | 6c 77 72 00 5f 73 74 72 6e 69 63 6d 70 00 5f 73 74 72 75 70 72 00 5f 74 6f 6c 6f 77 65 72 00 5f | lwr._strnicmp._strupr._tolower._ |
| 24b20 | 74 6f 75 70 70 65 72 00 5f 75 69 36 34 74 6f 61 00 5f 75 69 36 34 74 6f 77 00 5f 75 6c 74 6f 61 | toupper._ui64toa._ui64tow._ultoa |
| 24b40 | 00 5f 75 6c 74 6f 77 00 5f 76 73 63 77 70 72 69 6e 74 66 00 5f 76 73 6e 70 72 69 6e 74 66 00 5f | ._ultow._vscwprintf._vsnprintf._ |
| 24b60 | 76 73 6e 77 70 72 69 6e 74 66 00 5f 77 63 73 69 63 6d 70 00 5f 77 63 73 6c 77 72 00 5f 77 63 73 | vsnwprintf._wcsicmp._wcslwr._wcs |
| 24b80 | 6e 69 63 6d 70 00 5f 77 63 73 74 6f 75 69 36 34 00 5f 77 63 73 75 70 72 00 5f 77 74 6f 69 00 5f | nicmp._wcstoui64._wcsupr._wtoi._ |
| 24ba0 | 77 74 6f 69 36 34 00 5f 77 74 6f 6c 00 61 62 73 00 61 74 61 6e 00 61 74 6f 69 00 61 74 6f 6c 00 | wtoi64._wtol.abs.atan.atoi.atol. |
| 24bc0 | 62 73 65 61 72 63 68 00 63 65 69 6c 00 63 6f 73 00 66 61 62 73 00 66 6c 6f 6f 72 00 69 73 61 6c | bsearch.ceil.cos.fabs.floor.isal |
| 24be0 | 6e 75 6d 00 69 73 61 6c 70 68 61 00 69 73 63 6e 74 72 6c 00 69 73 64 69 67 69 74 00 69 73 67 72 | num.isalpha.iscntrl.isdigit.isgr |
| 24c00 | 61 70 68 00 69 73 6c 6f 77 65 72 00 69 73 70 72 69 6e 74 00 69 73 70 75 6e 63 74 00 69 73 73 70 | aph.islower.isprint.ispunct.issp |
| 24c20 | 61 63 65 00 69 73 75 70 70 65 72 00 69 73 77 61 6c 70 68 61 00 69 73 77 63 74 79 70 65 00 69 73 | ace.isupper.iswalpha.iswctype.is |
| 24c40 | 77 64 69 67 69 74 00 69 73 77 6c 6f 77 65 72 00 69 73 77 73 70 61 63 65 00 69 73 77 78 64 69 67 | wdigit.iswlower.iswspace.iswxdig |
| 24c60 | 69 74 00 69 73 78 64 69 67 69 74 00 6c 61 62 73 00 6c 6f 67 00 6c 6f 6e 67 6a 6d 70 00 6d 62 73 | it.isxdigit.labs.log.longjmp.mbs |
| 24c80 | 74 6f 77 63 73 00 6d 65 6d 63 68 72 00 6d 65 6d 63 6d 70 00 6d 65 6d 63 70 79 00 6d 65 6d 6d 6f | towcs.memchr.memcmp.memcpy.memmo |
| 24ca0 | 76 65 00 6d 65 6d 73 65 74 00 70 6f 77 00 71 73 6f 72 74 00 73 69 6e 00 73 70 72 69 6e 74 66 00 | ve.memset.pow.qsort.sin.sprintf. |
| 24cc0 | 73 71 72 74 00 73 73 63 61 6e 66 00 73 74 72 63 61 74 00 73 74 72 63 68 72 00 73 74 72 63 6d 70 | sqrt.sscanf.strcat.strchr.strcmp |
| 24ce0 | 00 73 74 72 63 70 79 00 73 74 72 63 73 70 6e 00 73 74 72 6c 65 6e 00 73 74 72 6e 63 61 74 00 73 | .strcpy.strcspn.strlen.strncat.s |
| 24d00 | 74 72 6e 63 6d 70 00 73 74 72 6e 63 70 79 00 73 74 72 70 62 72 6b 00 73 74 72 72 63 68 72 00 73 | trncmp.strncpy.strpbrk.strrchr.s |
| 24d20 | 74 72 73 70 6e 00 73 74 72 73 74 72 00 73 74 72 74 6f 6c 00 73 74 72 74 6f 75 6c 00 73 77 70 72 | trspn.strstr.strtol.strtoul.swpr |
| 24d40 | 69 6e 74 66 00 74 61 6e 00 74 6f 6c 6f 77 65 72 00 74 6f 75 70 70 65 72 00 74 6f 77 6c 6f 77 65 | intf.tan.tolower.toupper.towlowe |
| 24d60 | 72 00 74 6f 77 75 70 70 65 72 00 76 44 62 67 50 72 69 6e 74 45 78 00 76 44 62 67 50 72 69 6e 74 | r.towupper.vDbgPrintEx.vDbgPrint |
| 24d80 | 45 78 57 69 74 68 50 72 65 66 69 78 00 76 73 70 72 69 6e 74 66 00 77 63 73 63 61 74 00 77 63 73 | ExWithPrefix.vsprintf.wcscat.wcs |
| 24da0 | 63 68 72 00 77 63 73 63 6d 70 00 77 63 73 63 70 79 00 77 63 73 63 73 70 6e 00 77 63 73 6c 65 6e | chr.wcscmp.wcscpy.wcscspn.wcslen |
| 24dc0 | 00 77 63 73 6e 63 61 74 00 77 63 73 6e 63 6d 70 00 77 63 73 6e 63 70 79 00 77 63 73 70 62 72 6b | .wcsncat.wcsncmp.wcsncpy.wcspbrk |
| 24de0 | 00 77 63 73 72 63 68 72 00 77 63 73 73 70 6e 00 77 63 73 73 74 72 00 77 63 73 74 6f 6c 00 77 63 | .wcsrchr.wcsspn.wcsstr.wcstol.wc |
| 24e00 | 73 74 6f 6d 62 73 00 77 63 73 74 6f 75 6c 00 7f 6e 74 64 6c 6c 5f 4e 55 4c 4c 5f 54 48 55 4e 4b | stombs.wcstoul..ntdll_NULL_THUNK |
| 24e20 | 5f 44 41 54 41 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | _DATA.ntdll.dll/......1098492991 |
| 24e40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 36 20 20 20 20 20 20 20 | ..............0.......486....... |
| 24e60 | 60 0a 64 86 03 00 3f ac 79 41 08 01 00 00 08 00 00 00 00 00 00 00 2e 64 65 62 75 67 24 53 00 00 | `.d...?.yA.............debug$S.. |
| 24e80 | 00 00 00 00 00 00 40 00 00 00 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2e 69 | ......@...................@..B.i |
| 24ea0 | 64 61 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 cc 00 00 00 e0 00 00 00 00 00 00 00 03 00 | data$2.......................... |
| 24ec0 | 00 00 40 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0a 00 00 00 fe 00 00 00 e0 00 | ..@.0..idata$6.................. |
| 24ee0 | 00 00 00 00 00 00 00 00 00 00 40 00 20 c0 02 00 00 00 10 00 09 00 00 00 00 00 09 6e 74 64 6c 6c | ..........@................ntdll |
| 24f00 | 2e 64 6c 6c 28 00 13 10 07 00 00 00 d0 00 00 00 00 00 00 00 08 00 00 00 76 9d 12 4d 69 63 72 6f | .dll(...................v..Micro |
| 24f20 | 73 6f 66 74 20 28 52 29 20 4c 49 4e 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | soft.(R).LINK................... |
| 24f40 | 00 00 0c 00 00 00 03 00 00 00 03 00 00 00 00 00 04 00 00 00 03 00 10 00 00 00 05 00 00 00 03 00 | ................................ |
| 24f60 | 6e 74 64 6c 6c 2e 64 6c 6c 00 40 63 6f 6d 70 2e 69 64 76 9d 7b 00 ff ff 00 00 03 00 00 00 00 00 | ntdll.dll.@comp.idv.{........... |
| 24f80 | 04 00 00 00 00 00 00 00 02 00 00 00 02 00 2e 69 64 61 74 61 24 32 40 00 00 c0 02 00 00 00 68 00 | ...............idata$2@.......h. |
| 24fa0 | 2e 69 64 61 74 61 24 36 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 34 40 00 00 c0 00 00 | .idata$6...........idata$4@..... |
| 24fc0 | 00 00 68 00 2e 69 64 61 74 61 24 35 40 00 00 c0 00 00 00 00 68 00 00 00 00 00 1e 00 00 00 00 00 | ..h..idata$5@.......h........... |
| 24fe0 | 00 00 00 00 00 00 02 00 00 00 00 00 37 00 00 00 00 00 00 00 00 00 00 00 02 00 4e 00 00 00 5f 5f | ............7.............N...__ |
| 25000 | 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 5f 6e 74 64 6c 6c 00 5f 5f 4e 55 4c 4c 5f 49 | IMPORT_DESCRIPTOR_ntdll.__NULL_I |
| 25020 | 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 00 7f 6e 74 64 6c 6c 5f 4e 55 4c 4c 5f 54 48 55 | MPORT_DESCRIPTOR..ntdll_NULL_THU |
| 25040 | 4e 4b 5f 44 41 54 41 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | NK_DATA.ntdll.dll/......10984929 |
| 25060 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 32 34 39 20 20 20 20 20 | 91..............0.......249..... |
| 25080 | 20 20 60 0a 64 86 02 00 3f ac 79 41 b8 00 00 00 02 00 00 00 00 00 00 00 2e 64 65 62 75 67 24 53 | ..`.d...?.yA.............debug$S |
| 250a0 | 00 00 00 00 00 00 00 00 40 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 | ........@...d...............@..B |
| 250c0 | 2e 69 64 61 74 61 24 33 00 00 00 00 00 00 00 00 14 00 00 00 a4 00 00 00 00 00 00 00 00 00 00 00 | .idata$3........................ |
| 250e0 | 00 00 00 00 40 00 30 c0 02 00 00 00 10 00 09 00 00 00 00 00 09 6e 74 64 6c 6c 2e 64 6c 6c 28 00 | ....@.0..............ntdll.dll(. |
| 25100 | 13 10 07 00 00 00 d0 00 00 00 00 00 00 00 08 00 00 00 76 9d 12 4d 69 63 72 6f 73 6f 66 74 20 28 | ..................v..Microsoft.( |
| 25120 | 52 29 20 4c 49 4e 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 63 6f 6d | R).LINK.....................@com |
| 25140 | 70 2e 69 64 76 9d 7b 00 ff ff 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 02 00 00 00 02 00 | p.idv.{......................... |
| 25160 | 1d 00 00 00 5f 5f 4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 00 0a 6e 74 | ....__NULL_IMPORT_DESCRIPTOR..nt |
| 25180 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 251a0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 32 38 33 20 20 20 20 20 20 20 60 0a 64 86 03 00 3f ac | ......0.......283.......`.d...?. |
| 251c0 | 79 41 dc 00 00 00 02 00 00 00 00 00 00 00 2e 64 65 62 75 67 24 53 00 00 00 00 00 00 00 00 40 00 | yA.............debug$S........@. |
| 251e0 | 00 00 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2e 69 64 61 74 61 24 35 00 00 | ..................@..B.idata$5.. |
| 25200 | 00 00 00 00 00 00 08 00 00 00 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 c0 2e 69 | ..........................@.@..i |
| 25220 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 d4 00 00 00 00 00 00 00 00 00 00 00 00 00 | data$4.......................... |
| 25240 | 00 00 40 00 40 c0 02 00 00 00 10 00 09 00 00 00 00 00 09 6e 74 64 6c 6c 2e 64 6c 6c 28 00 13 10 | ..@.@..............ntdll.dll(... |
| 25260 | 07 00 00 00 d0 00 00 00 00 00 00 00 08 00 00 00 76 9d 12 4d 69 63 72 6f 73 6f 66 74 20 28 52 29 | ................v..Microsoft.(R) |
| 25280 | 20 4c 49 4e 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 63 6f 6d 70 2e 69 64 76 9d | .LINK.................@comp.idv. |
| 252a0 | 7b 00 ff ff 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 02 00 00 00 02 00 1b 00 00 00 7f 6e | {..............................n |
| 252c0 | 74 64 6c 6c 5f 4e 55 4c 4c 5f 54 48 55 4e 4b 5f 44 41 54 41 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | tdll_NULL_THUNK_DATA..ntdll.dll/ |
| 252e0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 25300 | 20 20 20 20 20 20 39 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 4d 00 | ......97........`.......d.?.yAM. |
| 25320 | 00 00 a1 01 0c 00 3f 50 72 6f 70 65 72 74 79 4c 65 6e 67 74 68 41 73 56 61 72 69 61 6e 74 40 40 | ......?PropertyLengthAsVariant@@ |
| 25340 | 59 41 4b 50 45 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 | YAKPEBUtagSERIALIZEDPROPERTYVALU |
| 25360 | 45 40 40 4b 47 45 40 5a 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | E@@KGE@Z.ntdll.dll..ntdll.dll/.. |
| 25380 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 253a0 | 20 20 20 20 31 34 31 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 79 00 00 00 | ....141.......`.......d.?.yAy... |
| 253c0 | ea 01 0c 00 3f 52 74 6c 43 6f 6e 76 65 72 74 50 72 6f 70 65 72 74 79 54 6f 56 61 72 69 61 6e 74 | ....?RtlConvertPropertyToVariant |
| 253e0 | 40 40 59 41 45 50 45 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 | @@YAEPEBUtagSERIALIZEDPROPERTYVA |
| 25400 | 4c 55 45 40 40 47 50 45 41 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e 54 40 40 50 45 41 56 50 4d | LUE@@GPEAUtagPROPVARIANT@@PEAVPM |
| 25420 | 65 6d 6f 72 79 41 6c 6c 6f 63 61 74 6f 72 40 40 40 5a 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | emoryAllocator@@@Z.ntdll.dll..nt |
| 25440 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 25460 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 31 33 31 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......131.......`....... |
| 25480 | 64 86 3f ac 79 41 6f 00 00 00 ef 01 0c 00 3f 52 74 6c 43 6f 6e 76 65 72 74 56 61 72 69 61 6e 74 | d.?.yAo.......?RtlConvertVariant |
| 254a0 | 54 6f 50 72 6f 70 65 72 74 79 40 40 59 41 50 45 41 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 | ToProperty@@YAPEAUtagSERIALIZEDP |
| 254c0 | 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 50 45 42 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e 54 | ROPERTYVALUE@@PEBUtagPROPVARIANT |
| 254e0 | 40 40 47 50 45 41 55 31 40 50 45 41 4b 4b 45 32 40 5a 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | @@GPEAU1@PEAKKE2@Z.ntdll.dll..nt |
| 25500 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 25520 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......55........`....... |
| 25540 | 64 86 3f ac 79 41 23 00 00 00 00 00 04 00 43 73 72 41 6c 6c 6f 63 61 74 65 43 61 70 74 75 72 65 | d.?.yA#.......CsrAllocateCapture |
| 25560 | 42 75 66 66 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Buffer.ntdll.dll..ntdll.dll/.... |
| 25580 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 255a0 | 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 01 00 | ..56........`.......d.?.yA$..... |
| 255c0 | 04 00 43 73 72 41 6c 6c 6f 63 61 74 65 4d 65 73 73 61 67 65 50 6f 69 6e 74 65 72 00 6e 74 64 6c | ..CsrAllocateMessagePointer.ntdl |
| 255e0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 25600 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 | ..............0.......54........ |
| 25620 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 02 00 04 00 43 73 72 43 61 70 74 75 72 65 | `.......d.?.yA".......CsrCapture |
| 25640 | 4d 65 73 73 61 67 65 42 75 66 66 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | MessageBuffer.ntdll.dll.ntdll.dl |
| 25660 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 25680 | 30 20 20 20 20 20 20 20 37 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......74........`.......d.?.yA |
| 256a0 | 36 00 00 00 03 00 04 00 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 4d 75 6c 74 69 55 6e | 6.......CsrCaptureMessageMultiUn |
| 256c0 | 69 63 6f 64 65 53 74 72 69 6e 67 73 49 6e 50 6c 61 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | icodeStringsInPlace.ntdll.dll.nt |
| 256e0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 25700 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......54........`....... |
| 25720 | 64 86 3f ac 79 41 22 00 00 00 04 00 04 00 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 53 | d.?.yA".......CsrCaptureMessageS |
| 25740 | 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tring.ntdll.dll.ntdll.dll/...... |
| 25760 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 25780 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 05 00 04 00 | 48........`.......d.?.yA........ |
| 257a0 | 43 73 72 43 61 70 74 75 72 65 54 69 6d 65 6f 75 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | CsrCaptureTimeout.ntdll.dll.ntdl |
| 257c0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 257e0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......50........`.......d. |
| 25800 | 3f ac 79 41 1e 00 00 00 06 00 04 00 43 73 72 43 6c 69 65 6e 74 43 61 6c 6c 53 65 72 76 65 72 00 | ?.yA........CsrClientCallServer. |
| 25820 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 25840 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 | 2991..............0.......55.... |
| 25860 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 07 00 04 00 43 73 72 43 6c 69 | ....`.......d.?.yA#.......CsrCli |
| 25880 | 65 6e 74 43 6f 6e 6e 65 63 74 54 6f 53 65 72 76 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | entConnectToServer.ntdll.dll..nt |
| 258a0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 258c0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 258e0 | 64 86 3f ac 79 41 1f 00 00 00 08 00 04 00 43 73 72 46 72 65 65 43 61 70 74 75 72 65 42 75 66 66 | d.?.yA........CsrFreeCaptureBuff |
| 25900 | 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | er.ntdll.dll..ntdll.dll/......10 |
| 25920 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 | 98492991..............0.......46 |
| 25940 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 09 00 04 00 43 73 | ........`.......d.?.yA........Cs |
| 25960 | 72 47 65 74 50 72 6f 63 65 73 73 49 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | rGetProcessId.ntdll.dll.ntdll.dl |
| 25980 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 259a0 | 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......57........`.......d.?.yA |
| 259c0 | 25 00 00 00 0a 00 04 00 43 73 72 49 64 65 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54 68 72 65 | %.......CsrIdentifyAlertableThre |
| 259e0 | 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ad.ntdll.dll..ntdll.dll/......10 |
| 25a00 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 | 98492991..............0.......43 |
| 25a20 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 0b 00 04 00 43 73 | ........`.......d.?.yA........Cs |
| 25a40 | 72 4e 65 77 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | rNewThread.ntdll.dll..ntdll.dll/ |
| 25a60 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 25a80 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 25aa0 | 00 00 0c 00 04 00 43 73 72 50 72 6f 62 65 46 6f 72 52 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ......CsrProbeForRead.ntdll.dll. |
| 25ac0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 25ae0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......47........`..... |
| 25b00 | 00 00 64 86 3f ac 79 41 1b 00 00 00 0d 00 04 00 43 73 72 50 72 6f 62 65 46 6f 72 57 72 69 74 65 | ..d.?.yA........CsrProbeForWrite |
| 25b20 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 25b40 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 25b60 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 0e 00 04 00 43 73 72 53 | ......`.......d.?.yA........CsrS |
| 25b80 | 65 74 50 72 69 6f 72 69 74 79 43 6c 61 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | etPriorityClass.ntdll.dll.ntdll. |
| 25ba0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 25bc0 | 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......44........`.......d.?. |
| 25be0 | 79 41 18 00 00 00 0f 00 04 00 44 62 67 42 72 65 61 6b 50 6f 69 6e 74 00 6e 74 64 6c 6c 2e 64 6c | yA........DbgBreakPoint.ntdll.dl |
| 25c00 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 25c20 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......39........`... |
| 25c40 | ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 10 00 04 00 44 62 67 50 72 69 6e 74 00 6e 74 64 6c 6c | ....d.?.yA........DbgPrint.ntdll |
| 25c60 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 25c80 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 | ..............0.......41........ |
| 25ca0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 11 00 04 00 44 62 67 50 72 69 6e 74 45 78 | `.......d.?.yA........DbgPrintEx |
| 25cc0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 25ce0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 | 492991..............0.......53.. |
| 25d00 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 12 00 04 00 44 62 67 50 | ......`.......d.?.yA!.......DbgP |
| 25d20 | 72 69 6e 74 52 65 74 75 72 6e 43 6f 6e 74 72 6f 6c 43 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | rintReturnControlC.ntdll.dll..nt |
| 25d40 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 25d60 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......40........`....... |
| 25d80 | 64 86 3f ac 79 41 14 00 00 00 13 00 04 00 44 62 67 50 72 6f 6d 70 74 00 6e 74 64 6c 6c 2e 64 6c | d.?.yA........DbgPrompt.ntdll.dl |
| 25da0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 25dc0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......55........`... |
| 25de0 | ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 14 00 04 00 44 62 67 51 75 65 72 79 44 65 62 75 67 46 | ....d.?.yA#.......DbgQueryDebugF |
| 25e00 | 69 6c 74 65 72 53 74 61 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ilterState.ntdll.dll..ntdll.dll/ |
| 25e20 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 25e40 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 25e60 | 00 00 15 00 04 00 44 62 67 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 6e 74 64 | ......DbgSetDebugFilterState.ntd |
| 25e80 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 25ea0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 | 91..............0.......48...... |
| 25ec0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 16 00 04 00 44 62 67 55 69 43 6f 6e | ..`.......d.?.yA........DbgUiCon |
| 25ee0 | 6e 65 63 74 54 6f 44 62 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | nectToDbg.ntdll.dll.ntdll.dll/.. |
| 25f00 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 25f20 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 25f40 | 17 00 04 00 44 62 67 55 69 43 6f 6e 74 69 6e 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....DbgUiContinue.ntdll.dll.ntdl |
| 25f60 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 25f80 | 20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......63........`.......d. |
| 25fa0 | 3f ac 79 41 2b 00 00 00 18 00 04 00 44 62 67 55 69 43 6f 6e 76 65 72 74 53 74 61 74 65 43 68 61 | ?.yA+.......DbgUiConvertStateCha |
| 25fc0 | 6e 67 65 53 74 72 75 63 74 75 72 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ngeStructure.ntdll.dll..ntdll.dl |
| 25fe0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 26000 | 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......54........`.......d.?.yA |
| 26020 | 22 00 00 00 19 00 04 00 44 62 67 55 69 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 | ".......DbgUiDebugActiveProcess. |
| 26040 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 26060 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 | 2991..............0.......56.... |
| 26080 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 1a 00 04 00 44 62 67 55 69 47 | ....`.......d.?.yA$.......DbgUiG |
| 260a0 | 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | etThreadDebugObject.ntdll.dll.nt |
| 260c0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 260e0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......54........`....... |
| 26100 | 64 86 3f ac 79 41 22 00 00 00 1b 00 04 00 44 62 67 55 69 49 73 73 75 65 52 65 6d 6f 74 65 42 72 | d.?.yA".......DbgUiIssueRemoteBr |
| 26120 | 65 61 6b 69 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eakin.ntdll.dll.ntdll.dll/...... |
| 26140 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 26160 | 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 1c 00 04 00 | 49........`.......d.?.yA........ |
| 26180 | 44 62 67 55 69 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | DbgUiRemoteBreakin.ntdll.dll..nt |
| 261a0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 261c0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......56........`....... |
| 261e0 | 64 86 3f ac 79 41 24 00 00 00 1d 00 04 00 44 62 67 55 69 53 65 74 54 68 72 65 61 64 44 65 62 75 | d.?.yA$.......DbgUiSetThreadDebu |
| 26200 | 67 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | gObject.ntdll.dll.ntdll.dll/.... |
| 26220 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 26240 | 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 1e 00 | ..49........`.......d.?.yA...... |
| 26260 | 04 00 44 62 67 55 69 53 74 6f 70 44 65 62 75 67 67 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ..DbgUiStopDebugging.ntdll.dll.. |
| 26280 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 262a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 262c0 | 00 00 64 86 3f ac 79 41 1f 00 00 00 1f 00 04 00 44 62 67 55 69 57 61 69 74 53 74 61 74 65 43 68 | ..d.?.yA........DbgUiWaitStateCh |
| 262e0 | 61 6e 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ange.ntdll.dll..ntdll.dll/...... |
| 26300 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 26320 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 20 00 04 00 | 48........`.......d.?.yA........ |
| 26340 | 44 62 67 55 73 65 72 42 72 65 61 6b 50 6f 69 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | DbgUserBreakPoint.ntdll.dll.ntdl |
| 26360 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 26380 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 263a0 | 3f ac 79 41 1b 00 00 00 21 00 04 00 45 74 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 41 00 6e 74 64 | ?.yA....!...EtwControlTraceA.ntd |
| 263c0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 263e0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 | 91..............0.......47...... |
| 26400 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 22 00 04 00 45 74 77 43 6f 6e 74 72 | ..`.......d.?.yA...."...EtwContr |
| 26420 | 6f 6c 54 72 61 63 65 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | olTraceW.ntdll.dll..ntdll.dll/.. |
| 26440 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 26460 | 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 | ....55........`.......d.?.yA#... |
| 26480 | 23 00 04 00 45 74 77 43 72 65 61 74 65 54 72 61 63 65 49 6e 73 74 61 6e 63 65 49 64 00 6e 74 64 | #...EtwCreateTraceInstanceId.ntd |
| 264a0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 264c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 | 91..............0.......45...... |
| 264e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 24 00 04 00 45 74 77 45 6e 61 62 6c | ..`.......d.?.yA....$...EtwEnabl |
| 26500 | 65 54 72 61 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | eTrace.ntdll.dll..ntdll.dll/.... |
| 26520 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 26540 | 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 25 00 | ..53........`.......d.?.yA!...%. |
| 26560 | 04 00 45 74 77 45 6e 75 6d 65 72 61 74 65 54 72 61 63 65 47 75 69 64 73 00 6e 74 64 6c 6c 2e 64 | ..EtwEnumerateTraceGuids.ntdll.d |
| 26580 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 265a0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a | ............0.......45........`. |
| 265c0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 26 00 04 00 45 74 77 46 6c 75 73 68 54 72 61 63 | ......d.?.yA....&...EtwFlushTrac |
| 265e0 | 65 41 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eA.ntdll.dll..ntdll.dll/......10 |
| 26600 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 | 98492991..............0.......45 |
| 26620 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 27 00 04 00 45 74 | ........`.......d.?.yA....'...Et |
| 26640 | 77 46 6c 75 73 68 54 72 61 63 65 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | wFlushTraceW.ntdll.dll..ntdll.dl |
| 26660 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 26680 | 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......53........`.......d.?.yA |
| 266a0 | 21 00 00 00 28 00 04 00 45 74 77 47 65 74 54 72 61 63 65 45 6e 61 62 6c 65 46 6c 61 67 73 00 6e | !...(...EtwGetTraceEnableFlags.n |
| 266c0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 266e0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 | 2991..............0.......53.... |
| 26700 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 29 00 04 00 45 74 77 47 65 74 | ....`.......d.?.yA!...)...EtwGet |
| 26720 | 54 72 61 63 65 45 6e 61 62 6c 65 4c 65 76 65 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | TraceEnableLevel.ntdll.dll..ntdl |
| 26740 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 26760 | 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......54........`.......d. |
| 26780 | 3f ac 79 41 22 00 00 00 2a 00 04 00 45 74 77 47 65 74 54 72 61 63 65 4c 6f 67 67 65 72 48 61 6e | ?.yA"...*...EtwGetTraceLoggerHan |
| 267a0 | 64 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | dle.ntdll.dll.ntdll.dll/......10 |
| 267c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 | 98492991..............0.......59 |
| 267e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 2b 00 04 00 45 74 | ........`.......d.?.yA'...+...Et |
| 26800 | 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 41 00 6e 74 64 6c 6c | wNotificationRegistrationA.ntdll |
| 26820 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 26840 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 | ..............0.......59........ |
| 26860 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 2c 00 04 00 45 74 77 4e 6f 74 69 66 69 63 | `.......d.?.yA'...,...EtwNotific |
| 26880 | 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ationRegistrationW.ntdll.dll..nt |
| 268a0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 268c0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......49........`....... |
| 268e0 | 64 86 3f ac 79 41 1d 00 00 00 2d 00 04 00 45 74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73 41 | d.?.yA....-...EtwQueryAllTracesA |
| 26900 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 26920 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 26940 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 2e 00 04 00 45 74 77 51 | ......`.......d.?.yA........EtwQ |
| 26960 | 75 65 72 79 41 6c 6c 54 72 61 63 65 73 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ueryAllTracesW.ntdll.dll..ntdll. |
| 26980 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 269a0 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 269c0 | 79 41 19 00 00 00 2f 00 04 00 45 74 77 51 75 65 72 79 54 72 61 63 65 41 00 6e 74 64 6c 6c 2e 64 | yA..../...EtwQueryTraceA.ntdll.d |
| 269e0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 26a00 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a | ............0.......45........`. |
| 26a20 | 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 30 00 04 00 45 74 77 51 75 65 72 79 54 72 61 63 | ......d.?.yA....0...EtwQueryTrac |
| 26a40 | 65 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eW.ntdll.dll..ntdll.dll/......10 |
| 26a60 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 | 98492991..............0.......55 |
| 26a80 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 31 00 04 00 45 74 | ........`.......d.?.yA#...1...Et |
| 26aa0 | 77 52 65 63 65 69 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 41 00 6e 74 64 6c 6c 2e 64 6c 6c | wReceiveNotificationsA.ntdll.dll |
| 26ac0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 26ae0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......55........`... |
| 26b00 | ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 32 00 04 00 45 74 77 52 65 63 65 69 76 65 4e 6f 74 69 | ....d.?.yA#...2...EtwReceiveNoti |
| 26b20 | 66 69 63 61 74 69 6f 6e 73 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ficationsW.ntdll.dll..ntdll.dll/ |
| 26b40 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 26b60 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 26b80 | 00 00 33 00 04 00 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 41 00 6e 74 64 | ..3...EtwRegisterTraceGuidsA.ntd |
| 26ba0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 26bc0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 26be0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 34 00 04 00 45 74 77 52 65 67 69 73 | ..`.......d.?.yA!...4...EtwRegis |
| 26c00 | 74 65 72 54 72 61 63 65 47 75 69 64 73 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | terTraceGuidsW.ntdll.dll..ntdll. |
| 26c20 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 26c40 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 26c60 | 79 41 19 00 00 00 35 00 04 00 45 74 77 53 74 61 72 74 54 72 61 63 65 41 00 6e 74 64 6c 6c 2e 64 | yA....5...EtwStartTraceA.ntdll.d |
| 26c80 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 26ca0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a | ............0.......45........`. |
| 26cc0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 36 00 04 00 45 74 77 53 74 61 72 74 54 72 61 63 | ......d.?.yA....6...EtwStartTrac |
| 26ce0 | 65 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eW.ntdll.dll..ntdll.dll/......10 |
| 26d00 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 | 98492991..............0.......44 |
| 26d20 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 37 00 04 00 45 74 | ........`.......d.?.yA....7...Et |
| 26d40 | 77 53 74 6f 70 54 72 61 63 65 41 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | wStopTraceA.ntdll.dll.ntdll.dll/ |
| 26d60 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 26d80 | 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 | ......44........`.......d.?.yA.. |
| 26da0 | 00 00 38 00 04 00 45 74 77 53 74 6f 70 54 72 61 63 65 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ..8...EtwStopTraceW.ntdll.dll.nt |
| 26dc0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 26de0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......44........`....... |
| 26e00 | 64 86 3f ac 79 41 18 00 00 00 39 00 04 00 45 74 77 54 72 61 63 65 45 76 65 6e 74 00 6e 74 64 6c | d.?.yA....9...EtwTraceEvent.ntdl |
| 26e20 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 26e40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 | ..............0.......52........ |
| 26e60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 3a 00 04 00 45 74 77 54 72 61 63 65 45 76 | `.......d.?.yA....:...EtwTraceEv |
| 26e80 | 65 6e 74 49 6e 73 74 61 6e 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | entInstance.ntdll.dll.ntdll.dll/ |
| 26ea0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 26ec0 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 26ee0 | 00 00 3b 00 04 00 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..;...EtwTraceMessage.ntdll.dll. |
| 26f00 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 26f20 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......48........`..... |
| 26f40 | 00 00 64 86 3f ac 79 41 1c 00 00 00 3c 00 04 00 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65 56 | ..d.?.yA....<...EtwTraceMessageV |
| 26f60 | 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | a.ntdll.dll.ntdll.dll/......1098 |
| 26f80 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 | 492991..............0.......54.. |
| 26fa0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 3d 00 04 00 45 74 77 55 | ......`.......d.?.yA"...=...EtwU |
| 26fc0 | 6e 72 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | nregisterTraceGuids.ntdll.dll.nt |
| 26fe0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 27000 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......46........`....... |
| 27020 | 64 86 3f ac 79 41 1a 00 00 00 3e 00 04 00 45 74 77 55 70 64 61 74 65 54 72 61 63 65 41 00 6e 74 | d.?.yA....>...EtwUpdateTraceA.nt |
| 27040 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 27060 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 | 91..............0.......46...... |
| 27080 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 3f 00 04 00 45 74 77 55 70 64 61 74 | ..`.......d.?.yA....?...EtwUpdat |
| 270a0 | 65 54 72 61 63 65 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | eTraceW.ntdll.dll.ntdll.dll/.... |
| 270c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 270e0 | 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 40 00 | ..49........`.......d.?.yA....@. |
| 27100 | 04 00 45 74 77 70 47 65 74 54 72 61 63 65 42 75 66 66 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ..EtwpGetTraceBuffer.ntdll.dll.. |
| 27120 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 27140 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......54........`..... |
| 27160 | 00 00 64 86 3f ac 79 41 22 00 00 00 41 00 04 00 45 74 77 70 53 65 74 48 57 43 6f 6e 66 69 67 46 | ..d.?.yA"...A...EtwpSetHWConfigF |
| 27180 | 75 6e 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | unction.ntdll.dll.ntdll.dll/.... |
| 271a0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 271c0 | 20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 45 00 | ..61........`.......d.?.yA)...E. |
| 271e0 | 04 00 4b 69 52 61 69 73 65 55 73 65 72 45 78 63 65 70 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72 | ..KiRaiseUserExceptionDispatcher |
| 27200 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 27220 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 27240 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 46 00 04 00 4b 69 55 73 | ......`.......d.?.yA....F...KiUs |
| 27260 | 65 72 41 70 63 44 69 73 70 61 74 63 68 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | erApcDispatcher.ntdll.dll.ntdll. |
| 27280 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 272a0 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 272c0 | 79 41 23 00 00 00 47 00 04 00 4b 69 55 73 65 72 43 61 6c 6c 62 61 63 6b 44 69 73 70 61 74 63 68 | yA#...G...KiUserCallbackDispatch |
| 272e0 | 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | er.ntdll.dll..ntdll.dll/......10 |
| 27300 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 27320 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 48 00 04 00 4b 69 | ........`.......d.?.yA$...H...Ki |
| 27340 | 55 73 65 72 45 78 63 65 70 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72 00 6e 74 64 6c 6c 2e 64 6c | UserExceptionDispatcher.ntdll.dl |
| 27360 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 27380 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......60........`... |
| 273a0 | ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 49 00 04 00 4c 64 72 41 63 63 65 73 73 4f 75 74 4f 66 | ....d.?.yA(...I...LdrAccessOutOf |
| 273c0 | 50 72 6f 63 65 73 73 52 65 73 6f 75 72 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ProcessResource.ntdll.dll.ntdll. |
| 273e0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 27400 | 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......48........`.......d.?. |
| 27420 | 79 41 1c 00 00 00 4a 00 04 00 4c 64 72 41 63 63 65 73 73 52 65 73 6f 75 72 63 65 00 6e 74 64 6c | yA....J...LdrAccessResource.ntdl |
| 27440 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 27460 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 | ..............0.......43........ |
| 27480 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 4b 00 04 00 4c 64 72 41 64 64 52 65 66 44 | `.......d.?.yA....K...LdrAddRefD |
| 274a0 | 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ll.ntdll.dll..ntdll.dll/......10 |
| 274c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 | 98492991..............0.......59 |
| 274e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 4c 00 04 00 4c 64 | ........`.......d.?.yA'...L...Ld |
| 27500 | 72 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 73 45 6e 61 62 6c 65 64 00 6e 74 64 6c 6c | rAlternateResourcesEnabled.ntdll |
| 27520 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 27540 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 | ..............0.......57........ |
| 27560 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 4d 00 04 00 4c 64 72 43 72 65 61 74 65 4f | `.......d.?.yA%...M...LdrCreateO |
| 27580 | 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | utOfProcessImage.ntdll.dll..ntdl |
| 275a0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 275c0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......58........`.......d. |
| 275e0 | 3f ac 79 41 26 00 00 00 4e 00 04 00 4c 64 72 44 65 73 74 72 6f 79 4f 75 74 4f 66 50 72 6f 63 65 | ?.yA&...N...LdrDestroyOutOfProce |
| 27600 | 73 73 49 6d 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ssImage.ntdll.dll.ntdll.dll/.... |
| 27620 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 27640 | 20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 4f 00 | ..61........`.......d.?.yA)...O. |
| 27660 | 04 00 4c 64 72 44 69 73 61 62 6c 65 54 68 72 65 61 64 43 61 6c 6c 6f 75 74 73 46 6f 72 44 6c 6c | ..LdrDisableThreadCalloutsForDll |
| 27680 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 276a0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 | 492991..............0.......47.. |
| 276c0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 50 00 04 00 4c 64 72 45 | ......`.......d.?.yA....P...LdrE |
| 276e0 | 6e 75 6d 52 65 73 6f 75 72 63 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | numResources.ntdll.dll..ntdll.dl |
| 27700 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 27720 | 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......56........`.......d.?.yA |
| 27740 | 24 00 00 00 51 00 04 00 4c 64 72 45 6e 75 6d 65 72 61 74 65 4c 6f 61 64 65 64 4d 6f 64 75 6c 65 | $...Q...LdrEnumerateLoadedModule |
| 27760 | 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | s.ntdll.dll.ntdll.dll/......1098 |
| 27780 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 | 492991..............0.......59.. |
| 277a0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 52 00 04 00 4c 64 72 46 | ......`.......d.?.yA'...R...LdrF |
| 277c0 | 69 6e 64 43 72 65 61 74 65 50 72 6f 63 65 73 73 4d 61 6e 69 66 65 73 74 00 6e 74 64 6c 6c 2e 64 | indCreateProcessManifest.ntdll.d |
| 277e0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 27800 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a | ............0.......53........`. |
| 27820 | 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 53 00 04 00 4c 64 72 46 69 6e 64 45 6e 74 72 79 | ......d.?.yA!...S...LdrFindEntry |
| 27840 | 46 6f 72 41 64 64 72 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ForAddress.ntdll.dll..ntdll.dll/ |
| 27860 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 27880 | 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 | ......57........`.......d.?.yA%. |
| 278a0 | 00 00 54 00 04 00 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 44 69 72 65 63 74 6f 72 79 5f 55 | ..T...LdrFindResourceDirectory_U |
| 278c0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 278e0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 27900 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 55 00 04 00 4c 64 72 46 | ......`.......d.?.yA....U...LdrF |
| 27920 | 69 6e 64 52 65 73 6f 75 72 63 65 45 78 5f 55 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | indResourceEx_U.ntdll.dll.ntdll. |
| 27940 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 27960 | 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......48........`.......d.?. |
| 27980 | 79 41 1c 00 00 00 56 00 04 00 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65 5f 55 00 6e 74 64 6c | yA....V...LdrFindResource_U.ntdl |
| 279a0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 279c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 | ..............0.......63........ |
| 279e0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 57 00 04 00 4c 64 72 46 6c 75 73 68 41 6c | `.......d.?.yA+...W...LdrFlushAl |
| 27a00 | 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c | ternateResourceModules.ntdll.dll |
| 27a20 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 27a40 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......46........`... |
| 27a60 | ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 58 00 04 00 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64 6c | ....d.?.yA....X...LdrGetDllHandl |
| 27a80 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 27aa0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 | 492991..............0.......48.. |
| 27ac0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 59 00 04 00 4c 64 72 47 | ......`.......d.?.yA....Y...LdrG |
| 27ae0 | 65 74 44 6c 6c 48 61 6e 64 6c 65 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | etDllHandleEx.ntdll.dll.ntdll.dl |
| 27b00 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 27b20 | 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......58........`.......d.?.yA |
| 27b40 | 26 00 00 00 5a 00 04 00 4c 64 72 47 65 74 4b 6e 6f 77 6e 44 6c 6c 53 65 63 74 69 6f 6e 48 61 6e | &...Z...LdrGetKnownDllSectionHan |
| 27b60 | 64 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | dle.ntdll.dll.ntdll.dll/......10 |
| 27b80 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 | 98492991..............0.......53 |
| 27ba0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 5b 00 04 00 4c 64 | ........`.......d.?.yA!...[...Ld |
| 27bc0 | 72 47 65 74 50 72 6f 63 65 64 75 72 65 41 64 64 72 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | rGetProcedureAddress.ntdll.dll.. |
| 27be0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 27c00 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 27c20 | 00 00 64 86 3f ac 79 41 1d 00 00 00 5c 00 04 00 4c 64 72 48 6f 74 50 61 74 63 68 52 6f 75 74 69 | ..d.?.yA....\...LdrHotPatchRouti |
| 27c40 | 6e 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ne.ntdll.dll..ntdll.dll/......10 |
| 27c60 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 | 98492991..............0.......55 |
| 27c80 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 5d 00 04 00 4c 64 | ........`.......d.?.yA#...]...Ld |
| 27ca0 | 72 49 6e 69 74 53 68 69 6d 45 6e 67 69 6e 65 44 79 6e 61 6d 69 63 00 6e 74 64 6c 6c 2e 64 6c 6c | rInitShimEngineDynamic.ntdll.dll |
| 27cc0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 27ce0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......49........`... |
| 27d00 | ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 5e 00 04 00 4c 64 72 49 6e 69 74 69 61 6c 69 7a 65 54 | ....d.?.yA....^...LdrInitializeT |
| 27d20 | 68 75 6e 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | hunk.ntdll.dll..ntdll.dll/...... |
| 27d40 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 27d60 | 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 5f 00 04 00 | 61........`.......d.?.yA)..._... |
| 27d80 | 4c 64 72 4c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 00 6e | LdrLoadAlternateResourceModule.n |
| 27da0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 27dc0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 | 2991..............0.......41.... |
| 27de0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 60 00 04 00 4c 64 72 4c 6f 61 | ....`.......d.?.yA....`...LdrLoa |
| 27e00 | 64 44 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | dDll.ntdll.dll..ntdll.dll/...... |
| 27e20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 27e40 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 61 00 04 00 | 48........`.......d.?.yA....a... |
| 27e60 | 4c 64 72 4c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | LdrLockLoaderLock.ntdll.dll.ntdl |
| 27e80 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 27ea0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......57........`.......d. |
| 27ec0 | 3f ac 79 41 25 00 00 00 62 00 04 00 4c 64 72 4f 70 65 6e 49 6d 61 67 65 46 69 6c 65 4f 70 74 69 | ?.yA%...b...LdrOpenImageFileOpti |
| 27ee0 | 6f 6e 73 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | onsKey.ntdll.dll..ntdll.dll/.... |
| 27f00 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 27f20 | 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 63 00 | ..63........`.......d.?.yA+...c. |
| 27f40 | 04 00 4c 64 72 50 72 6f 63 65 73 73 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 43 6f 6d 70 6c 65 | ..LdrProcessInitializationComple |
| 27f60 | 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | te.ntdll.dll..ntdll.dll/......10 |
| 27f80 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 27fa0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 64 00 04 00 4c 64 | ........`.......d.?.yA$...d...Ld |
| 27fc0 | 72 50 72 6f 63 65 73 73 52 65 6c 6f 63 61 74 69 6f 6e 42 6c 6f 63 6b 00 6e 74 64 6c 6c 2e 64 6c | rProcessRelocationBlock.ntdll.dl |
| 27fe0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 28000 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......64........`... |
| 28020 | ff ff 00 00 64 86 3f ac 79 41 2c 00 00 00 65 00 04 00 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 | ....d.?.yA,...e...LdrQueryImageF |
| 28040 | 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ileExecutionOptions.ntdll.dll.nt |
| 28060 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 28080 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......66........`....... |
| 280a0 | 64 86 3f ac 79 41 2e 00 00 00 66 00 04 00 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 45 | d.?.yA....f...LdrQueryImageFileE |
| 280c0 | 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | xecutionOptionsEx.ntdll.dll.ntdl |
| 280e0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 28100 | 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......57........`.......d. |
| 28120 | 3f ac 79 41 25 00 00 00 67 00 04 00 4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 4b 65 79 | ?.yA%...g...LdrQueryImageFileKey |
| 28140 | 4f 70 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Option.ntdll.dll..ntdll.dll/.... |
| 28160 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 28180 | 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 68 00 | ..63........`.......d.?.yA+...h. |
| 281a0 | 04 00 4c 64 72 51 75 65 72 79 50 72 6f 63 65 73 73 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 | ..LdrQueryProcessModuleInformati |
| 281c0 | 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | on.ntdll.dll..ntdll.dll/......10 |
| 281e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 38 | 98492991..............0.......68 |
| 28200 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 30 00 00 00 69 00 04 00 4c 64 | ........`.......d.?.yA0...i...Ld |
| 28220 | 72 53 65 74 41 70 70 43 6f 6d 70 61 74 44 6c 6c 52 65 64 69 72 65 63 74 69 6f 6e 43 61 6c 6c 62 | rSetAppCompatDllRedirectionCallb |
| 28240 | 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ack.ntdll.dll.ntdll.dll/......10 |
| 28260 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 28280 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 6a 00 04 00 4c 64 | ........`.......d.?.yA"...j...Ld |
| 282a0 | 72 53 65 74 44 6c 6c 4d 61 6e 69 66 65 73 74 50 72 6f 62 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | rSetDllManifestProber.ntdll.dll. |
| 282c0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 282e0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 28300 | 00 00 64 86 3f ac 79 41 1d 00 00 00 6b 00 04 00 4c 64 72 53 68 75 74 64 6f 77 6e 50 72 6f 63 65 | ..d.?.yA....k...LdrShutdownProce |
| 28320 | 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ss.ntdll.dll..ntdll.dll/......10 |
| 28340 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 | 98492991..............0.......48 |
| 28360 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 6c 00 04 00 4c 64 | ........`.......d.?.yA....l...Ld |
| 28380 | 72 53 68 75 74 64 6f 77 6e 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | rShutdownThread.ntdll.dll.ntdll. |
| 283a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 283c0 | 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......63........`.......d.?. |
| 283e0 | 79 41 2b 00 00 00 6d 00 04 00 4c 64 72 55 6e 6c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f | yA+...m...LdrUnloadAlternateReso |
| 28400 | 75 72 63 65 4d 6f 64 75 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | urceModule.ntdll.dll..ntdll.dll/ |
| 28420 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 28440 | 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 | ......43........`.......d.?.yA.. |
| 28460 | 00 00 6e 00 04 00 4c 64 72 55 6e 6c 6f 61 64 44 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ..n...LdrUnloadDll.ntdll.dll..nt |
| 28480 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 284a0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......50........`....... |
| 284c0 | 64 86 3f ac 79 41 1e 00 00 00 6f 00 04 00 4c 64 72 55 6e 6c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 | d.?.yA....o...LdrUnlockLoaderLoc |
| 284e0 | 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | k.ntdll.dll.ntdll.dll/......1098 |
| 28500 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 | 492991..............0.......60.. |
| 28520 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 70 00 04 00 4c 64 72 56 | ......`.......d.?.yA(...p...LdrV |
| 28540 | 65 72 69 66 79 49 6d 61 67 65 4d 61 74 63 68 65 73 43 68 65 63 6b 73 75 6d 00 6e 74 64 6c 6c 2e | erifyImageMatchesChecksum.ntdll. |
| 28560 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 28580 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a | ............0.......46........`. |
| 285a0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 71 00 06 00 4e 6c 73 41 6e 73 69 43 6f 64 65 50 | ......d.?.yA....q...NlsAnsiCodeP |
| 285c0 | 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | age.ntdll.dll.ntdll.dll/......10 |
| 285e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 | 98492991..............0.......47 |
| 28600 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 72 00 06 00 4e 6c | ........`.......d.?.yA....r...Nl |
| 28620 | 73 4d 62 43 6f 64 65 50 61 67 65 54 61 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | sMbCodePageTag.ntdll.dll..ntdll. |
| 28640 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 28660 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 28680 | 79 41 1e 00 00 00 73 00 06 00 4e 6c 73 4d 62 4f 65 6d 43 6f 64 65 50 61 67 65 54 61 67 00 6e 74 | yA....s...NlsMbOemCodePageTag.nt |
| 286a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 286c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 286e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 74 00 04 00 4e 74 41 63 63 65 70 74 | ..`.......d.?.yA....t...NtAccept |
| 28700 | 43 6f 6e 6e 65 63 74 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ConnectPort.ntdll.dll.ntdll.dll/ |
| 28720 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 28740 | 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 | ......44........`.......d.?.yA.. |
| 28760 | 00 00 75 00 04 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ..u...NtAccessCheck.ntdll.dll.nt |
| 28780 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 287a0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......57........`....... |
| 287c0 | 64 86 3f ac 79 41 25 00 00 00 76 00 04 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 41 6e 64 41 75 | d.?.yA%...v...NtAccessCheckAndAu |
| 287e0 | 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ditAlarm.ntdll.dll..ntdll.dll/.. |
| 28800 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 28820 | 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 | ....50........`.......d.?.yA.... |
| 28840 | 77 00 04 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 00 6e 74 64 6c 6c 2e 64 6c | w...NtAccessCheckByType.ntdll.dl |
| 28860 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 28880 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......63........`... |
| 288a0 | ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 78 00 04 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 | ....d.?.yA+...x...NtAccessCheckB |
| 288c0 | 79 54 79 70 65 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | yTypeAndAuditAlarm.ntdll.dll..nt |
| 288e0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 28900 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......60........`....... |
| 28920 | 64 86 3f ac 79 41 28 00 00 00 79 00 04 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 | d.?.yA(...y...NtAccessCheckByTyp |
| 28940 | 65 52 65 73 75 6c 74 4c 69 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | eResultList.ntdll.dll.ntdll.dll/ |
| 28960 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 28980 | 20 20 20 20 20 20 37 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 35 00 | ......73........`.......d.?.yA5. |
| 289a0 | 00 00 7a 00 04 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c | ..z...NtAccessCheckByTypeResultL |
| 289c0 | 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | istAndAuditAlarm.ntdll.dll..ntdl |
| 289e0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 28a00 | 20 20 20 20 30 20 20 20 20 20 20 20 38 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......81........`.......d. |
| 28a20 | 3f ac 79 41 3d 00 00 00 7b 00 04 00 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 | ?.yA=...{...NtAccessCheckByTypeR |
| 28a40 | 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 00 6e | esultListAndAuditAlarmByHandle.n |
| 28a60 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 28a80 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 | 2991..............0.......40.... |
| 28aa0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 7c 00 04 00 4e 74 41 64 64 41 | ....`.......d.?.yA....|...NtAddA |
| 28ac0 | 74 6f 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | tom.ntdll.dll.ntdll.dll/......10 |
| 28ae0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 | 98492991..............0.......45 |
| 28b00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 7d 00 04 00 4e 74 | ........`.......d.?.yA....}...Nt |
| 28b20 | 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | AddBootEntry.ntdll.dll..ntdll.dl |
| 28b40 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 28b60 | 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......47........`.......d.?.yA |
| 28b80 | 1b 00 00 00 7e 00 04 00 4e 74 41 64 64 44 72 69 76 65 72 45 6e 74 72 79 00 6e 74 64 6c 6c 2e 64 | ....~...NtAddDriverEntry.ntdll.d |
| 28ba0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 28bc0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a | ............0.......50........`. |
| 28be0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 7f 00 04 00 4e 74 41 64 6a 75 73 74 47 72 6f 75 | ......d.?.yA........NtAdjustGrou |
| 28c00 | 70 73 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | psToken.ntdll.dll.ntdll.dll/.... |
| 28c20 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 28c40 | 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 80 00 | ..54........`.......d.?.yA"..... |
| 28c60 | 04 00 4e 74 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e | ..NtAdjustPrivilegesToken.ntdll. |
| 28c80 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 28ca0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a | ............0.......50........`. |
| 28cc0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 81 00 04 00 4e 74 41 6c 65 72 74 52 65 73 75 6d | ......d.?.yA........NtAlertResum |
| 28ce0 | 65 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | eThread.ntdll.dll.ntdll.dll/.... |
| 28d00 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 28d20 | 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 82 00 | ..44........`.......d.?.yA...... |
| 28d40 | 04 00 4e 74 41 6c 65 72 74 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ..NtAlertThread.ntdll.dll.ntdll. |
| 28d60 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 28d80 | 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......56........`.......d.?. |
| 28da0 | 79 41 24 00 00 00 83 00 04 00 4e 74 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 | yA$.......NtAllocateLocallyUniqu |
| 28dc0 | 65 49 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eId.ntdll.dll.ntdll.dll/......10 |
| 28de0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 | 98492991..............0.......58 |
| 28e00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 84 00 04 00 4e 74 | ........`.......d.?.yA&.......Nt |
| 28e20 | 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 6e 74 64 6c 6c 2e | AllocateUserPhysicalPages.ntdll. |
| 28e40 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 28e60 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a | ............0.......46........`. |
| 28e80 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 85 00 04 00 4e 74 41 6c 6c 6f 63 61 74 65 55 75 | ......d.?.yA........NtAllocateUu |
| 28ea0 | 69 64 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ids.ntdll.dll.ntdll.dll/......10 |
| 28ec0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 28ee0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 86 00 04 00 4e 74 | ........`.......d.?.yA".......Nt |
| 28f00 | 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | AllocateVirtualMemory.ntdll.dll. |
| 28f20 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 28f40 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 28f60 | 00 00 64 86 3f ac 79 41 20 00 00 00 87 00 04 00 4e 74 41 70 70 68 65 6c 70 43 61 63 68 65 43 6f | ..d.?.yA........NtApphelpCacheCo |
| 28f80 | 6e 74 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ntrol.ntdll.dll.ntdll.dll/...... |
| 28fa0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 28fc0 | 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 88 00 04 00 | 54........`.......d.?.yA"....... |
| 28fe0 | 4e 74 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c | NtAreMappedFilesTheSame.ntdll.dl |
| 29000 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 29020 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......57........`... |
| 29040 | ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 89 00 04 00 4e 74 41 73 73 69 67 6e 50 72 6f 63 65 73 | ....d.?.yA%.......NtAssignProces |
| 29060 | 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | sToJobObject.ntdll.dll..ntdll.dl |
| 29080 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 290a0 | 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......47........`.......d.?.yA |
| 290c0 | 1b 00 00 00 8a 00 04 00 4e 74 43 61 6c 6c 62 61 63 6b 52 65 74 75 72 6e 00 6e 74 64 6c 6c 2e 64 | ........NtCallbackReturn.ntdll.d |
| 290e0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 29100 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a | ............0.......58........`. |
| 29120 | 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 8b 00 04 00 4e 74 43 61 6e 63 65 6c 44 65 76 69 | ......d.?.yA&.......NtCancelDevi |
| 29140 | 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ceWakeupRequest.ntdll.dll.ntdll. |
| 29160 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 29180 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 291a0 | 79 41 19 00 00 00 8c 00 04 00 4e 74 43 61 6e 63 65 6c 49 6f 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 | yA........NtCancelIoFile.ntdll.d |
| 291c0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 291e0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a | ............0.......44........`. |
| 29200 | 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 8d 00 04 00 4e 74 43 61 6e 63 65 6c 54 69 6d 65 | ......d.?.yA........NtCancelTime |
| 29220 | 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | r.ntdll.dll.ntdll.dll/......1098 |
| 29240 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 | 492991..............0.......43.. |
| 29260 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 8e 00 04 00 4e 74 43 6c | ......`.......d.?.yA........NtCl |
| 29280 | 65 61 72 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | earEvent.ntdll.dll..ntdll.dll/.. |
| 292a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 292c0 | 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 | ....38........`.......d.?.yA.... |
| 292e0 | 8f 00 04 00 4e 74 43 6c 6f 73 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ....NtClose.ntdll.dll.ntdll.dll/ |
| 29300 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 29320 | 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 | ......54........`.......d.?.yA". |
| 29340 | 00 00 90 00 04 00 4e 74 43 6c 6f 73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 | ......NtCloseObjectAuditAlarm.nt |
| 29360 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 29380 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 | 91..............0.......44...... |
| 293a0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 91 00 04 00 4e 74 43 6f 6d 70 61 63 | ..`.......d.?.yA........NtCompac |
| 293c0 | 74 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tKeys.ntdll.dll.ntdll.dll/...... |
| 293e0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 29400 | 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 92 00 04 00 | 46........`.......d.?.yA........ |
| 29420 | 4e 74 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | NtCompareTokens.ntdll.dll.ntdll. |
| 29440 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 29460 | 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......52........`.......d.?. |
| 29480 | 79 41 20 00 00 00 93 00 04 00 4e 74 43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 | yA........NtCompleteConnectPort. |
| 294a0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 294c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 | 2991..............0.......44.... |
| 294e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 94 00 04 00 4e 74 43 6f 6d 70 | ....`.......d.?.yA........NtComp |
| 29500 | 72 65 73 73 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ressKey.ntdll.dll.ntdll.dll/.... |
| 29520 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 29540 | 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 95 00 | ..44........`.......d.?.yA...... |
| 29560 | 04 00 4e 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ..NtConnectPort.ntdll.dll.ntdll. |
| 29580 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 295a0 | 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......41........`.......d.?. |
| 295c0 | 79 41 15 00 00 00 96 00 04 00 4e 74 43 6f 6e 74 69 6e 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | yA........NtContinue.ntdll.dll.. |
| 295e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 29600 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 29620 | 00 00 64 86 3f ac 79 41 1e 00 00 00 97 00 04 00 4e 74 43 72 65 61 74 65 44 65 62 75 67 4f 62 6a | ..d.?.yA........NtCreateDebugObj |
| 29640 | 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ect.ntdll.dll.ntdll.dll/......10 |
| 29660 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 29680 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 98 00 04 00 4e 74 | ........`.......d.?.yA".......Nt |
| 296a0 | 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | CreateDirectoryObject.ntdll.dll. |
| 296c0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 296e0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......44........`..... |
| 29700 | 00 00 64 86 3f ac 79 41 18 00 00 00 99 00 04 00 4e 74 43 72 65 61 74 65 45 76 65 6e 74 00 6e 74 | ..d.?.yA........NtCreateEvent.nt |
| 29720 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 29740 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 | 91..............0.......48...... |
| 29760 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 9a 00 04 00 4e 74 43 72 65 61 74 65 | ..`.......d.?.yA........NtCreate |
| 29780 | 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | EventPair.ntdll.dll.ntdll.dll/.. |
| 297a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 297c0 | 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 | ....43........`.......d.?.yA.... |
| 297e0 | 9b 00 04 00 4e 74 43 72 65 61 74 65 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ....NtCreateFile.ntdll.dll..ntdl |
| 29800 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 29820 | 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......51........`.......d. |
| 29840 | 3f ac 79 41 1f 00 00 00 9c 00 04 00 4e 74 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e | ?.yA........NtCreateIoCompletion |
| 29860 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 29880 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 | 492991..............0.......48.. |
| 298a0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 9d 00 04 00 4e 74 43 72 | ......`.......d.?.yA........NtCr |
| 298c0 | 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | eateJobObject.ntdll.dll.ntdll.dl |
| 298e0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 29900 | 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......45........`.......d.?.yA |
| 29920 | 19 00 00 00 9e 00 04 00 4e 74 43 72 65 61 74 65 4a 6f 62 53 65 74 00 6e 74 64 6c 6c 2e 64 6c 6c | ........NtCreateJobSet.ntdll.dll |
| 29940 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 29960 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......42........`... |
| 29980 | ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 9f 00 04 00 4e 74 43 72 65 61 74 65 4b 65 79 00 6e 74 | ....d.?.yA........NtCreateKey.nt |
| 299a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 299c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 | 91..............0.......49...... |
| 299e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 a0 00 04 00 4e 74 43 72 65 61 74 65 | ..`.......d.?.yA........NtCreate |
| 29a00 | 4b 65 79 65 64 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | KeyedEvent.ntdll.dll..ntdll.dll/ |
| 29a20 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 29a40 | 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 | ......51........`.......d.?.yA.. |
| 29a60 | 00 00 a1 00 04 00 4e 74 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 6e 74 64 6c 6c | ......NtCreateMailslotFile.ntdll |
| 29a80 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 29aa0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 | ..............0.......45........ |
| 29ac0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 a2 00 04 00 4e 74 43 72 65 61 74 65 4d 75 | `.......d.?.yA........NtCreateMu |
| 29ae0 | 74 61 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tant.ntdll.dll..ntdll.dll/...... |
| 29b00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 29b20 | 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 a3 00 04 00 | 52........`.......d.?.yA........ |
| 29b40 | 4e 74 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | NtCreateNamedPipeFile.ntdll.dll. |
| 29b60 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 29b80 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 29ba0 | 00 00 64 86 3f ac 79 41 1d 00 00 00 a4 00 04 00 4e 74 43 72 65 61 74 65 50 61 67 69 6e 67 46 69 | ..d.?.yA........NtCreatePagingFi |
| 29bc0 | 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | le.ntdll.dll..ntdll.dll/......10 |
| 29be0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 | 98492991..............0.......43 |
| 29c00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 a5 00 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 29c20 | 43 72 65 61 74 65 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | CreatePort.ntdll.dll..ntdll.dll/ |
| 29c40 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 29c60 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 29c80 | 00 00 a6 00 04 00 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ......NtCreateProcess.ntdll.dll. |
| 29ca0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 29cc0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......48........`..... |
| 29ce0 | 00 00 64 86 3f ac 79 41 1c 00 00 00 a7 00 04 00 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 | ..d.?.yA........NtCreateProcessE |
| 29d00 | 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | x.ntdll.dll.ntdll.dll/......1098 |
| 29d20 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 | 492991..............0.......46.. |
| 29d40 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 a8 00 04 00 4e 74 43 72 | ......`.......d.?.yA........NtCr |
| 29d60 | 65 61 74 65 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | eateProfile.ntdll.dll.ntdll.dll/ |
| 29d80 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 29da0 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 29dc0 | 00 00 a9 00 04 00 4e 74 43 72 65 61 74 65 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ......NtCreateSection.ntdll.dll. |
| 29de0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 29e00 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......48........`..... |
| 29e20 | 00 00 64 86 3f ac 79 41 1c 00 00 00 aa 00 04 00 4e 74 43 72 65 61 74 65 53 65 6d 61 70 68 6f 72 | ..d.?.yA........NtCreateSemaphor |
| 29e40 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 29e60 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 | 492991..............0.......57.. |
| 29e80 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 ab 00 04 00 4e 74 43 72 | ......`.......d.?.yA%.......NtCr |
| 29ea0 | 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c | eateSymbolicLinkObject.ntdll.dll |
| 29ec0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 29ee0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......45........`... |
| 29f00 | ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 ac 00 04 00 4e 74 43 72 65 61 74 65 54 68 72 65 61 64 | ....d.?.yA........NtCreateThread |
| 29f20 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 29f40 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 | 492991..............0.......44.. |
| 29f60 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 ad 00 04 00 4e 74 43 72 | ......`.......d.?.yA........NtCr |
| 29f80 | 65 61 74 65 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | eateTimer.ntdll.dll.ntdll.dll/.. |
| 29fa0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 29fc0 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 29fe0 | ae 00 04 00 4e 74 43 72 65 61 74 65 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....NtCreateToken.ntdll.dll.ntdl |
| 2a000 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2a020 | 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......51........`.......d. |
| 2a040 | 3f ac 79 41 1f 00 00 00 af 00 04 00 4e 74 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f 72 74 | ?.yA........NtCreateWaitablePort |
| 2a060 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 2a080 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 | 492991..............0.......51.. |
| 2a0a0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 b0 00 04 00 4e 74 44 65 | ......`.......d.?.yA........NtDe |
| 2a0c0 | 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | bugActiveProcess.ntdll.dll..ntdl |
| 2a0e0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2a100 | 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......46........`.......d. |
| 2a120 | 3f ac 79 41 1a 00 00 00 b1 00 04 00 4e 74 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 00 6e 74 64 6c | ?.yA........NtDebugContinue.ntdl |
| 2a140 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2a160 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 | ..............0.......47........ |
| 2a180 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 b2 00 04 00 4e 74 44 65 6c 61 79 45 78 65 | `.......d.?.yA........NtDelayExe |
| 2a1a0 | 63 75 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | cution.ntdll.dll..ntdll.dll/.... |
| 2a1c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2a1e0 | 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 b3 00 | ..43........`.......d.?.yA...... |
| 2a200 | 04 00 4e 74 44 65 6c 65 74 65 41 74 6f 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ..NtDeleteAtom.ntdll.dll..ntdll. |
| 2a220 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2a240 | 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......48........`.......d.?. |
| 2a260 | 79 41 1c 00 00 00 b4 00 04 00 4e 74 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 6e 74 64 6c | yA........NtDeleteBootEntry.ntdl |
| 2a280 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2a2a0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 | ..............0.......50........ |
| 2a2c0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 b5 00 04 00 4e 74 44 65 6c 65 74 65 44 72 | `.......d.?.yA........NtDeleteDr |
| 2a2e0 | 69 76 65 72 45 6e 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | iverEntry.ntdll.dll.ntdll.dll/.. |
| 2a300 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2a320 | 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 | ....43........`.......d.?.yA.... |
| 2a340 | b6 00 04 00 4e 74 44 65 6c 65 74 65 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ....NtDeleteFile.ntdll.dll..ntdl |
| 2a360 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2a380 | 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......42........`.......d. |
| 2a3a0 | 3f ac 79 41 16 00 00 00 b7 00 04 00 4e 74 44 65 6c 65 74 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c | ?.yA........NtDeleteKey.ntdll.dl |
| 2a3c0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 2a3e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......55........`... |
| 2a400 | ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 b8 00 04 00 4e 74 44 65 6c 65 74 65 4f 62 6a 65 63 74 | ....d.?.yA#.......NtDeleteObject |
| 2a420 | 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | AuditAlarm.ntdll.dll..ntdll.dll/ |
| 2a440 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2a460 | 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 | ......47........`.......d.?.yA.. |
| 2a480 | 00 00 b9 00 04 00 4e 74 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c | ......NtDeleteValueKey.ntdll.dll |
| 2a4a0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 2a4c0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......52........`... |
| 2a4e0 | ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 ba 00 04 00 4e 74 44 65 76 69 63 65 49 6f 43 6f 6e 74 | ....d.?.yA........NtDeviceIoCont |
| 2a500 | 72 6f 6c 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | rolFile.ntdll.dll.ntdll.dll/.... |
| 2a520 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2a540 | 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 bb 00 | ..46........`.......d.?.yA...... |
| 2a560 | 04 00 4e 74 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ..NtDisplayString.ntdll.dll.ntdl |
| 2a580 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2a5a0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......48........`.......d. |
| 2a5c0 | 3f ac 79 41 1c 00 00 00 bc 00 04 00 4e 74 44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 00 6e 74 | ?.yA........NtDuplicateObject.nt |
| 2a5e0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2a600 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 | 91..............0.......47...... |
| 2a620 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 bd 00 04 00 4e 74 44 75 70 6c 69 63 | ..`.......d.?.yA........NtDuplic |
| 2a640 | 61 74 65 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ateToken.ntdll.dll..ntdll.dll/.. |
| 2a660 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2a680 | 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 | ....53........`.......d.?.yA!... |
| 2a6a0 | be 00 04 00 4e 74 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65 73 00 6e 74 64 6c 6c | ....NtEnumerateBootEntries.ntdll |
| 2a6c0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 2a6e0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 | ..............0.......55........ |
| 2a700 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 bf 00 04 00 4e 74 45 6e 75 6d 65 72 61 74 | `.......d.?.yA#.......NtEnumerat |
| 2a720 | 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | eDriverEntries.ntdll.dll..ntdll. |
| 2a740 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2a760 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 2a780 | 79 41 19 00 00 00 c0 00 04 00 4e 74 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 | yA........NtEnumerateKey.ntdll.d |
| 2a7a0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2a7c0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 37 20 20 20 20 20 20 20 20 60 0a | ............0.......67........`. |
| 2a7e0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 2f 00 00 00 c1 00 04 00 4e 74 45 6e 75 6d 65 72 61 74 65 53 | ......d.?.yA/.......NtEnumerateS |
| 2a800 | 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 00 6e 74 64 6c 6c 2e 64 | ystemEnvironmentValuesEx.ntdll.d |
| 2a820 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2a840 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a | ............0.......50........`. |
| 2a860 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 c2 00 04 00 4e 74 45 6e 75 6d 65 72 61 74 65 56 | ......d.?.yA........NtEnumerateV |
| 2a880 | 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | alueKey.ntdll.dll.ntdll.dll/.... |
| 2a8a0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2a8c0 | 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 c3 00 | ..46........`.......d.?.yA...... |
| 2a8e0 | 04 00 4e 74 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ..NtExtendSection.ntdll.dll.ntdl |
| 2a900 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2a920 | 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......44........`.......d. |
| 2a940 | 3f ac 79 41 18 00 00 00 c4 00 04 00 4e 74 46 69 6c 74 65 72 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e | ?.yA........NtFilterToken.ntdll. |
| 2a960 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 2a980 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a | ............0.......41........`. |
| 2a9a0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 c5 00 04 00 4e 74 46 69 6e 64 41 74 6f 6d 00 6e | ......d.?.yA........NtFindAtom.n |
| 2a9c0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 2a9e0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 | 2991..............0.......49.... |
| 2aa00 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 c6 00 04 00 4e 74 46 6c 75 73 | ....`.......d.?.yA........NtFlus |
| 2aa20 | 68 42 75 66 66 65 72 73 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | hBuffersFile.ntdll.dll..ntdll.dl |
| 2aa40 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2aa60 | 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......54........`.......d.?.yA |
| 2aa80 | 22 00 00 00 c7 00 04 00 4e 74 46 6c 75 73 68 49 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65 00 | ".......NtFlushInstructionCache. |
| 2aaa0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 2aac0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 | 2991..............0.......41.... |
| 2aae0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 c8 00 04 00 4e 74 46 6c 75 73 | ....`.......d.?.yA........NtFlus |
| 2ab00 | 68 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | hKey.ntdll.dll..ntdll.dll/...... |
| 2ab20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2ab40 | 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 c9 00 04 00 | 51........`.......d.?.yA........ |
| 2ab60 | 4e 74 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | NtFlushVirtualMemory.ntdll.dll.. |
| 2ab80 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2aba0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 2abc0 | 00 00 64 86 3f ac 79 41 1d 00 00 00 ca 00 04 00 4e 74 46 6c 75 73 68 57 72 69 74 65 42 75 66 66 | ..d.?.yA........NtFlushWriteBuff |
| 2abe0 | 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | er.ntdll.dll..ntdll.dll/......10 |
| 2ac00 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 2ac20 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 cb 00 04 00 4e 74 | ........`.......d.?.yA".......Nt |
| 2ac40 | 46 72 65 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | FreeUserPhysicalPages.ntdll.dll. |
| 2ac60 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2ac80 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 2aca0 | 00 00 64 86 3f ac 79 41 1e 00 00 00 cc 00 04 00 4e 74 46 72 65 65 56 69 72 74 75 61 6c 4d 65 6d | ..d.?.yA........NtFreeVirtualMem |
| 2acc0 | 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ory.ntdll.dll.ntdll.dll/......10 |
| 2ace0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 | 98492991..............0.......46 |
| 2ad00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 cd 00 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2ad20 | 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | FsControlFile.ntdll.dll.ntdll.dl |
| 2ad40 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2ad60 | 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......49........`.......d.?.yA |
| 2ad80 | 1d 00 00 00 ce 00 04 00 4e 74 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 6e 74 64 6c 6c | ........NtGetContextThread.ntdll |
| 2ada0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 2adc0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 | ..............0.......58........ |
| 2ade0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 cf 00 04 00 4e 74 47 65 74 43 75 72 72 65 | `.......d.?.yA&.......NtGetCurre |
| 2ae00 | 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ntProcessorNumber.ntdll.dll.ntdl |
| 2ae20 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2ae40 | 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......52........`.......d. |
| 2ae60 | 3f ac 79 41 20 00 00 00 d0 00 04 00 4e 74 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 | ?.yA........NtGetDevicePowerStat |
| 2ae80 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 2aea0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 2aec0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 d1 00 04 00 4e 74 47 65 | ......`.......d.?.yA........NtGe |
| 2aee0 | 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | tPlugPlayEvent.ntdll.dll..ntdll. |
| 2af00 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2af20 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 2af40 | 79 41 19 00 00 00 d2 00 04 00 4e 74 47 65 74 54 69 63 6b 43 6f 75 6e 74 00 6e 74 64 6c 6c 2e 64 | yA........NtGetTickCount.ntdll.d |
| 2af60 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2af80 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a | ............0.......46........`. |
| 2afa0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 d3 00 04 00 4e 74 47 65 74 57 72 69 74 65 57 61 | ......d.?.yA........NtGetWriteWa |
| 2afc0 | 74 63 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | tch.ntdll.dll.ntdll.dll/......10 |
| 2afe0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 | 98492991..............0.......58 |
| 2b000 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 d4 00 04 00 4e 74 | ........`.......d.?.yA&.......Nt |
| 2b020 | 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e | ImpersonateAnonymousToken.ntdll. |
| 2b040 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 2b060 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a | ............0.......56........`. |
| 2b080 | 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 d5 00 04 00 4e 74 49 6d 70 65 72 73 6f 6e 61 74 | ......d.?.yA$.......NtImpersonat |
| 2b0a0 | 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | eClientOfPort.ntdll.dll.ntdll.dl |
| 2b0c0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2b0e0 | 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......50........`.......d.?.yA |
| 2b100 | 1e 00 00 00 d6 00 04 00 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 00 6e 74 64 6c | ........NtImpersonateThread.ntdl |
| 2b120 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2b140 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 | ..............0.......51........ |
| 2b160 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 d7 00 04 00 4e 74 49 6e 69 74 69 61 6c 69 | `.......d.?.yA........NtInitiali |
| 2b180 | 7a 65 52 65 67 69 73 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | zeRegistry.ntdll.dll..ntdll.dll/ |
| 2b1a0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2b1c0 | 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 | ......52........`.......d.?.yA.. |
| 2b1e0 | 00 00 d8 00 04 00 4e 74 49 6e 69 74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 00 6e 74 64 6c | ......NtInitiatePowerAction.ntdl |
| 2b200 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2b220 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 | ..............0.......47........ |
| 2b240 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 d9 00 04 00 4e 74 49 73 50 72 6f 63 65 73 | `.......d.?.yA........NtIsProces |
| 2b260 | 73 49 6e 4a 6f 62 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | sInJob.ntdll.dll..ntdll.dll/.... |
| 2b280 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2b2a0 | 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 da 00 | ..56........`.......d.?.yA$..... |
| 2b2c0 | 04 00 4e 74 49 73 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 6e 74 64 6c | ..NtIsSystemResumeAutomatic.ntdl |
| 2b2e0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2b300 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 | ..............0.......43........ |
| 2b320 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 db 00 04 00 4e 74 4c 69 73 74 65 6e 50 6f | `.......d.?.yA........NtListenPo |
| 2b340 | 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | rt.ntdll.dll..ntdll.dll/......10 |
| 2b360 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 | 98492991..............0.......43 |
| 2b380 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 dc 00 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2b3a0 | 4c 6f 61 64 44 72 69 76 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | LoadDriver.ntdll.dll..ntdll.dll/ |
| 2b3c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2b3e0 | 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 | ......40........`.......d.?.yA.. |
| 2b400 | 00 00 dd 00 04 00 4e 74 4c 6f 61 64 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ......NtLoadKey.ntdll.dll.ntdll. |
| 2b420 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2b440 | 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......41........`.......d.?. |
| 2b460 | 79 41 15 00 00 00 de 00 04 00 4e 74 4c 6f 61 64 4b 65 79 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | yA........NtLoadKey2.ntdll.dll.. |
| 2b480 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2b4a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......42........`..... |
| 2b4c0 | 00 00 64 86 3f ac 79 41 16 00 00 00 df 00 04 00 4e 74 4c 6f 61 64 4b 65 79 45 78 00 6e 74 64 6c | ..d.?.yA........NtLoadKeyEx.ntdl |
| 2b4e0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2b500 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 | ..............0.......41........ |
| 2b520 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 e0 00 04 00 4e 74 4c 6f 63 6b 46 69 6c 65 | `.......d.?.yA........NtLockFile |
| 2b540 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 2b560 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 | 492991..............0.......58.. |
| 2b580 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 e1 00 04 00 4e 74 4c 6f | ......`.......d.?.yA&.......NtLo |
| 2b5a0 | 63 6b 50 72 6f 64 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c | ckProductActivationKeys.ntdll.dl |
| 2b5c0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 2b5e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......48........`... |
| 2b600 | ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 e2 00 04 00 4e 74 4c 6f 63 6b 52 65 67 69 73 74 72 79 | ....d.?.yA........NtLockRegistry |
| 2b620 | 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | Key.ntdll.dll.ntdll.dll/......10 |
| 2b640 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 | 98492991..............0.......50 |
| 2b660 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 e3 00 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2b680 | 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | LockVirtualMemory.ntdll.dll.ntdl |
| 2b6a0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2b6c0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......52........`.......d. |
| 2b6e0 | 3f ac 79 41 20 00 00 00 e4 00 04 00 4e 74 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 | ?.yA........NtMakePermanentObjec |
| 2b700 | 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | t.ntdll.dll.ntdll.dll/......1098 |
| 2b720 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 | 492991..............0.......52.. |
| 2b740 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 e5 00 04 00 4e 74 4d 61 | ......`.......d.?.yA........NtMa |
| 2b760 | 6b 65 54 65 6d 70 6f 72 61 72 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | keTemporaryObject.ntdll.dll.ntdl |
| 2b780 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2b7a0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......53........`.......d. |
| 2b7c0 | 3f ac 79 41 21 00 00 00 e6 00 04 00 4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 | ?.yA!.......NtMapUserPhysicalPag |
| 2b7e0 | 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | es.ntdll.dll..ntdll.dll/......10 |
| 2b800 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 | 98492991..............0.......60 |
| 2b820 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 e7 00 04 00 4e 74 | ........`.......d.?.yA(.......Nt |
| 2b840 | 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74 65 72 00 6e 74 64 6c | MapUserPhysicalPagesScatter.ntdl |
| 2b860 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2b880 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 | ..............0.......49........ |
| 2b8a0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 e8 00 04 00 4e 74 4d 61 70 56 69 65 77 4f | `.......d.?.yA........NtMapViewO |
| 2b8c0 | 66 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | fSection.ntdll.dll..ntdll.dll/.. |
| 2b8e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2b900 | 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 | ....48........`.......d.?.yA.... |
| 2b920 | e9 00 04 00 4e 74 4d 6f 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ....NtModifyBootEntry.ntdll.dll. |
| 2b940 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2b960 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 2b980 | 00 00 64 86 3f ac 79 41 1e 00 00 00 ea 00 04 00 4e 74 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e | ..d.?.yA........NtModifyDriverEn |
| 2b9a0 | 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | try.ntdll.dll.ntdll.dll/......10 |
| 2b9c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 | 98492991..............0.......58 |
| 2b9e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 eb 00 04 00 4e 74 | ........`.......d.?.yA&.......Nt |
| 2ba00 | 4e 6f 74 69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 6e 74 64 6c 6c 2e | NotifyChangeDirectoryFile.ntdll. |
| 2ba20 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 2ba40 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a | ............0.......48........`. |
| 2ba60 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 ec 00 04 00 4e 74 4e 6f 74 69 66 79 43 68 61 6e | ......d.?.yA........NtNotifyChan |
| 2ba80 | 67 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | geKey.ntdll.dll.ntdll.dll/...... |
| 2baa0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2bac0 | 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 ed 00 04 00 | 57........`.......d.?.yA%....... |
| 2bae0 | 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69 70 6c 65 4b 65 79 73 00 6e 74 64 6c 6c | NtNotifyChangeMultipleKeys.ntdll |
| 2bb00 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 2bb20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 | ..............0.......52........ |
| 2bb40 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 ee 00 04 00 4e 74 4f 70 65 6e 44 69 72 65 | `.......d.?.yA........NtOpenDire |
| 2bb60 | 63 74 6f 72 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ctoryObject.ntdll.dll.ntdll.dll/ |
| 2bb80 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2bba0 | 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 | ......42........`.......d.?.yA.. |
| 2bbc0 | 00 00 ef 00 04 00 4e 74 4f 70 65 6e 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ......NtOpenEvent.ntdll.dll.ntdl |
| 2bbe0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2bc00 | 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......46........`.......d. |
| 2bc20 | 3f ac 79 41 1a 00 00 00 f0 00 04 00 4e 74 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c | ?.yA........NtOpenEventPair.ntdl |
| 2bc40 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2bc60 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 | ..............0.......41........ |
| 2bc80 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 f1 00 04 00 4e 74 4f 70 65 6e 46 69 6c 65 | `.......d.?.yA........NtOpenFile |
| 2bca0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 2bcc0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 2bce0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 f2 00 04 00 4e 74 4f 70 | ......`.......d.?.yA........NtOp |
| 2bd00 | 65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | enIoCompletion.ntdll.dll..ntdll. |
| 2bd20 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2bd40 | 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......46........`.......d.?. |
| 2bd60 | 79 41 1a 00 00 00 f3 00 04 00 4e 74 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e | yA........NtOpenJobObject.ntdll. |
| 2bd80 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 2bda0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a | ............0.......40........`. |
| 2bdc0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 f4 00 04 00 4e 74 4f 70 65 6e 4b 65 79 00 6e 74 | ......d.?.yA........NtOpenKey.nt |
| 2bde0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2be00 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 | 91..............0.......47...... |
| 2be20 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 f5 00 04 00 4e 74 4f 70 65 6e 4b 65 | ..`.......d.?.yA........NtOpenKe |
| 2be40 | 79 65 64 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | yedEvent.ntdll.dll..ntdll.dll/.. |
| 2be60 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2be80 | 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 | ....43........`.......d.?.yA.... |
| 2bea0 | f6 00 04 00 4e 74 4f 70 65 6e 4d 75 74 61 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ....NtOpenMutant.ntdll.dll..ntdl |
| 2bec0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2bee0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......53........`.......d. |
| 2bf00 | 3f ac 79 41 21 00 00 00 f7 00 04 00 4e 74 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 | ?.yA!.......NtOpenObjectAuditAla |
| 2bf20 | 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | rm.ntdll.dll..ntdll.dll/......10 |
| 2bf40 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 | 98492991..............0.......44 |
| 2bf60 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 f8 00 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2bf80 | 4f 70 65 6e 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | OpenProcess.ntdll.dll.ntdll.dll/ |
| 2bfa0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2bfc0 | 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 | ......49........`.......d.?.yA.. |
| 2bfe0 | 00 00 f9 00 04 00 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 | ......NtOpenProcessToken.ntdll.d |
| 2c000 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2c020 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a | ............0.......51........`. |
| 2c040 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 fa 00 04 00 4e 74 4f 70 65 6e 50 72 6f 63 65 73 | ......d.?.yA........NtOpenProces |
| 2c060 | 73 54 6f 6b 65 6e 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | sTokenEx.ntdll.dll..ntdll.dll/.. |
| 2c080 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2c0a0 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 2c0c0 | fb 00 04 00 4e 74 4f 70 65 6e 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....NtOpenSection.ntdll.dll.ntdl |
| 2c0e0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2c100 | 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......46........`.......d. |
| 2c120 | 3f ac 79 41 1a 00 00 00 fc 00 04 00 4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 6e 74 64 6c | ?.yA........NtOpenSemaphore.ntdl |
| 2c140 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2c160 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 | ..............0.......55........ |
| 2c180 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 fd 00 04 00 4e 74 4f 70 65 6e 53 79 6d 62 | `.......d.?.yA#.......NtOpenSymb |
| 2c1a0 | 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | olicLinkObject.ntdll.dll..ntdll. |
| 2c1c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2c1e0 | 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......43........`.......d.?. |
| 2c200 | 79 41 17 00 00 00 fe 00 04 00 4e 74 4f 70 65 6e 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c | yA........NtOpenThread.ntdll.dll |
| 2c220 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 2c240 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......48........`... |
| 2c260 | ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 ff 00 04 00 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f | ....d.?.yA........NtOpenThreadTo |
| 2c280 | 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ken.ntdll.dll.ntdll.dll/......10 |
| 2c2a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 | 98492991..............0.......50 |
| 2c2c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 00 01 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2c2e0 | 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | OpenThreadTokenEx.ntdll.dll.ntdl |
| 2c300 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2c320 | 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......42........`.......d. |
| 2c340 | 3f ac 79 41 16 00 00 00 01 01 04 00 4e 74 4f 70 65 6e 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c | ?.yA........NtOpenTimer.ntdll.dl |
| 2c360 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 2c380 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......48........`... |
| 2c3a0 | ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 02 01 04 00 4e 74 50 6c 75 67 50 6c 61 79 43 6f 6e 74 | ....d.?.yA........NtPlugPlayCont |
| 2c3c0 | 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | rol.ntdll.dll.ntdll.dll/......10 |
| 2c3e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 | 98492991..............0.......49 |
| 2c400 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 03 01 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2c420 | 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | PowerInformation.ntdll.dll..ntdl |
| 2c440 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2c460 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 2c480 | 3f ac 79 41 1b 00 00 00 04 01 04 00 4e 74 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 00 6e 74 64 | ?.yA........NtPrivilegeCheck.ntd |
| 2c4a0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2c4c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 | 91..............0.......58...... |
| 2c4e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 05 01 04 00 4e 74 50 72 69 76 69 6c | ..`.......d.?.yA&.......NtPrivil |
| 2c500 | 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | egeObjectAuditAlarm.ntdll.dll.nt |
| 2c520 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2c540 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......60........`....... |
| 2c560 | 64 86 3f ac 79 41 28 00 00 00 06 01 04 00 4e 74 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 | d.?.yA(.......NtPrivilegedServic |
| 2c580 | 65 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | eAuditAlarm.ntdll.dll.ntdll.dll/ |
| 2c5a0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2c5c0 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 2c5e0 | 00 00 07 01 04 00 4e 74 50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 | ......NtProtectVirtualMemory.ntd |
| 2c600 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2c620 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 | 91..............0.......43...... |
| 2c640 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 08 01 04 00 4e 74 50 75 6c 73 65 45 | ..`.......d.?.yA........NtPulseE |
| 2c660 | 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | vent.ntdll.dll..ntdll.dll/...... |
| 2c680 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2c6a0 | 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 09 01 04 00 | 52........`.......d.?.yA........ |
| 2c6c0 | 4e 74 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | NtQueryAttributesFile.ntdll.dll. |
| 2c6e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2c700 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 2c720 | 00 00 64 86 3f ac 79 41 20 00 00 00 0a 01 04 00 4e 74 51 75 65 72 79 42 6f 6f 74 45 6e 74 72 79 | ..d.?.yA........NtQueryBootEntry |
| 2c740 | 4f 72 64 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Order.ntdll.dll.ntdll.dll/...... |
| 2c760 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2c780 | 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 0b 01 04 00 | 49........`.......d.?.yA........ |
| 2c7a0 | 4e 74 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | NtQueryBootOptions.ntdll.dll..nt |
| 2c7c0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2c7e0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......54........`....... |
| 2c800 | 64 86 3f ac 79 41 22 00 00 00 0c 01 04 00 4e 74 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 | d.?.yA".......NtQueryDebugFilter |
| 2c820 | 53 74 61 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | State.ntdll.dll.ntdll.dll/...... |
| 2c840 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2c860 | 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 0d 01 04 00 | 51........`.......d.?.yA........ |
| 2c880 | 4e 74 51 75 65 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | NtQueryDefaultLocale.ntdll.dll.. |
| 2c8a0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2c8c0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......55........`..... |
| 2c8e0 | 00 00 64 86 3f ac 79 41 23 00 00 00 0e 01 04 00 4e 74 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 | ..d.?.yA#.......NtQueryDefaultUI |
| 2c900 | 4c 61 6e 67 75 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | Language.ntdll.dll..ntdll.dll/.. |
| 2c920 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2c940 | 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 | ....51........`.......d.?.yA.... |
| 2c960 | 0f 01 04 00 4e 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 | ....NtQueryDirectoryFile.ntdll.d |
| 2c980 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2c9a0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a | ............0.......53........`. |
| 2c9c0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 10 01 04 00 4e 74 51 75 65 72 79 44 69 72 65 63 | ......d.?.yA!.......NtQueryDirec |
| 2c9e0 | 74 6f 72 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | toryObject.ntdll.dll..ntdll.dll/ |
| 2ca00 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2ca20 | 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 | ......54........`.......d.?.yA". |
| 2ca40 | 00 00 11 01 04 00 4e 74 51 75 65 72 79 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 6e 74 | ......NtQueryDriverEntryOrder.nt |
| 2ca60 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2ca80 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 | 91..............0.......44...... |
| 2caa0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 12 01 04 00 4e 74 51 75 65 72 79 45 | ..`.......d.?.yA........NtQueryE |
| 2cac0 | 61 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | aFile.ntdll.dll.ntdll.dll/...... |
| 2cae0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2cb00 | 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 13 01 04 00 | 43........`.......d.?.yA........ |
| 2cb20 | 4e 74 51 75 65 72 79 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | NtQueryEvent.ntdll.dll..ntdll.dl |
| 2cb40 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2cb60 | 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......56........`.......d.?.yA |
| 2cb80 | 24 00 00 00 14 01 04 00 4e 74 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c | $.......NtQueryFullAttributesFil |
| 2cba0 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 2cbc0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 | 492991..............0.......53.. |
| 2cbe0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 15 01 04 00 4e 74 51 75 | ......`.......d.?.yA!.......NtQu |
| 2cc00 | 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | eryInformationAtom.ntdll.dll..nt |
| 2cc20 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2cc40 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......53........`....... |
| 2cc60 | 64 86 3f ac 79 41 21 00 00 00 16 01 04 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e | d.?.yA!.......NtQueryInformation |
| 2cc80 | 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | File.ntdll.dll..ntdll.dll/...... |
| 2cca0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2ccc0 | 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 17 01 04 00 | 58........`.......d.?.yA&....... |
| 2cce0 | 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c | NtQueryInformationJobObject.ntdl |
| 2cd00 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2cd20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 2cd40 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 18 01 04 00 4e 74 51 75 65 72 79 49 6e 66 | `.......d.?.yA!.......NtQueryInf |
| 2cd60 | 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ormationPort.ntdll.dll..ntdll.dl |
| 2cd80 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2cda0 | 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......56........`.......d.?.yA |
| 2cdc0 | 24 00 00 00 19 01 04 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 | $.......NtQueryInformationProces |
| 2cde0 | 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | s.ntdll.dll.ntdll.dll/......1098 |
| 2ce00 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 | 492991..............0.......55.. |
| 2ce20 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 1a 01 04 00 4e 74 51 75 | ......`.......d.?.yA#.......NtQu |
| 2ce40 | 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | eryInformationThread.ntdll.dll.. |
| 2ce60 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2ce80 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......54........`..... |
| 2cea0 | 00 00 64 86 3f ac 79 41 22 00 00 00 1b 01 04 00 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 | ..d.?.yA".......NtQueryInformati |
| 2cec0 | 6f 6e 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | onToken.ntdll.dll.ntdll.dll/.... |
| 2cee0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2cf00 | 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 1c 01 | ..55........`.......d.?.yA#..... |
| 2cf20 | 04 00 4e 74 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 00 6e 74 64 6c 6c | ..NtQueryInstallUILanguage.ntdll |
| 2cf40 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 2cf60 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 2cf80 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 1d 01 04 00 4e 74 51 75 65 72 79 49 6e 74 | `.......d.?.yA!.......NtQueryInt |
| 2cfa0 | 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ervalProfile.ntdll.dll..ntdll.dl |
| 2cfc0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2cfe0 | 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......50........`.......d.?.yA |
| 2d000 | 1e 00 00 00 1e 01 04 00 4e 74 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 6e 74 64 6c | ........NtQueryIoCompletion.ntdl |
| 2d020 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2d040 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 | ..............0.......41........ |
| 2d060 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 1f 01 04 00 4e 74 51 75 65 72 79 4b 65 79 | `.......d.?.yA........NtQueryKey |
| 2d080 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 2d0a0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 | 492991..............0.......54.. |
| 2d0c0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 20 01 04 00 4e 74 51 75 | ......`.......d.?.yA".......NtQu |
| 2d0e0 | 65 72 79 4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | eryMultipleValueKey.ntdll.dll.nt |
| 2d100 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2d120 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......44........`....... |
| 2d140 | 64 86 3f ac 79 41 18 00 00 00 21 01 04 00 4e 74 51 75 65 72 79 4d 75 74 61 6e 74 00 6e 74 64 6c | d.?.yA....!...NtQueryMutant.ntdl |
| 2d160 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2d180 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 | ..............0.......44........ |
| 2d1a0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 22 01 04 00 4e 74 51 75 65 72 79 4f 62 6a | `.......d.?.yA...."...NtQueryObj |
| 2d1c0 | 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ect.ntdll.dll.ntdll.dll/......10 |
| 2d1e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 | 98492991..............0.......49 |
| 2d200 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 23 01 04 00 4e 74 | ........`.......d.?.yA....#...Nt |
| 2d220 | 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | QueryOpenSubKeys.ntdll.dll..ntdl |
| 2d240 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2d260 | 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......51........`.......d. |
| 2d280 | 3f ac 79 41 1f 00 00 00 24 01 04 00 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 | ?.yA....$...NtQueryOpenSubKeysEx |
| 2d2a0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 2d2c0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 | 492991..............0.......56.. |
| 2d2e0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 25 01 04 00 4e 74 51 75 | ......`.......d.?.yA$...%...NtQu |
| 2d300 | 65 72 79 50 65 72 66 6f 72 6d 61 6e 63 65 43 6f 75 6e 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | eryPerformanceCounter.ntdll.dll. |
| 2d320 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2d340 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......60........`..... |
| 2d360 | 00 00 64 86 3f ac 79 41 28 00 00 00 26 01 04 00 4e 74 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 | ..d.?.yA(...&...NtQueryPortInfor |
| 2d380 | 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | mationProcess.ntdll.dll.ntdll.dl |
| 2d3a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2d3c0 | 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......58........`.......d.?.yA |
| 2d3e0 | 26 00 00 00 27 01 04 00 4e 74 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 | &...'...NtQueryQuotaInformationF |
| 2d400 | 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ile.ntdll.dll.ntdll.dll/......10 |
| 2d420 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 | 98492991..............0.......45 |
| 2d440 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 28 01 04 00 4e 74 | ........`.......d.?.yA....(...Nt |
| 2d460 | 51 75 65 72 79 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | QuerySection.ntdll.dll..ntdll.dl |
| 2d480 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2d4a0 | 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......52........`.......d.?.yA |
| 2d4c0 | 20 00 00 00 29 01 04 00 4e 74 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 | ....)...NtQuerySecurityObject.nt |
| 2d4e0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2d500 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 | 91..............0.......47...... |
| 2d520 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 2a 01 04 00 4e 74 51 75 65 72 79 53 | ..`.......d.?.yA....*...NtQueryS |
| 2d540 | 65 6d 61 70 68 6f 72 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | emaphore.ntdll.dll..ntdll.dll/.. |
| 2d560 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2d580 | 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 | ....56........`.......d.?.yA$... |
| 2d5a0 | 2b 01 04 00 4e 74 51 75 65 72 79 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 6e 74 | +...NtQuerySymbolicLinkObject.nt |
| 2d5c0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2d5e0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 | 91..............0.......60...... |
| 2d600 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 2c 01 04 00 4e 74 51 75 65 72 79 53 | ..`.......d.?.yA(...,...NtQueryS |
| 2d620 | 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ystemEnvironmentValue.ntdll.dll. |
| 2d640 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2d660 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......62........`..... |
| 2d680 | 00 00 64 86 3f ac 79 41 2a 00 00 00 2d 01 04 00 4e 74 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 | ..d.?.yA*...-...NtQuerySystemEnv |
| 2d6a0 | 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ironmentValueEx.ntdll.dll.ntdll. |
| 2d6c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2d6e0 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 2d700 | 79 41 23 00 00 00 2e 01 04 00 4e 74 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 | yA#.......NtQuerySystemInformati |
| 2d720 | 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | on.ntdll.dll..ntdll.dll/......10 |
| 2d740 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 | 98492991..............0.......48 |
| 2d760 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 2f 01 04 00 4e 74 | ........`.......d.?.yA..../...Nt |
| 2d780 | 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | QuerySystemTime.ntdll.dll.ntdll. |
| 2d7a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2d7c0 | 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......43........`.......d.?. |
| 2d7e0 | 79 41 17 00 00 00 30 01 04 00 4e 74 51 75 65 72 79 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c | yA....0...NtQueryTimer.ntdll.dll |
| 2d800 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 2d820 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......53........`... |
| 2d840 | ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 31 01 04 00 4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 | ....d.?.yA!...1...NtQueryTimerRe |
| 2d860 | 73 6f 6c 75 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | solution.ntdll.dll..ntdll.dll/.. |
| 2d880 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2d8a0 | 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 | ....46........`.......d.?.yA.... |
| 2d8c0 | 32 01 04 00 4e 74 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | 2...NtQueryValueKey.ntdll.dll.nt |
| 2d8e0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2d900 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 2d920 | 64 86 3f ac 79 41 1f 00 00 00 33 01 04 00 4e 74 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f | d.?.yA....3...NtQueryVirtualMemo |
| 2d940 | 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ry.ntdll.dll..ntdll.dll/......10 |
| 2d960 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 | 98492991..............0.......59 |
| 2d980 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 34 01 04 00 4e 74 | ........`.......d.?.yA'...4...Nt |
| 2d9a0 | 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 6e 74 64 6c 6c | QueryVolumeInformationFile.ntdll |
| 2d9c0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 2d9e0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 | ..............0.......47........ |
| 2da00 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 35 01 04 00 4e 74 51 75 65 75 65 41 70 63 | `.......d.?.yA....5...NtQueueApc |
| 2da20 | 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Thread.ntdll.dll..ntdll.dll/.... |
| 2da40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2da60 | 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 36 01 | ..47........`.......d.?.yA....6. |
| 2da80 | 04 00 4e 74 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ..NtRaiseException.ntdll.dll..nt |
| 2daa0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2dac0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......47........`....... |
| 2dae0 | 64 86 3f ac 79 41 1b 00 00 00 37 01 04 00 4e 74 52 61 69 73 65 48 61 72 64 45 72 72 6f 72 00 6e | d.?.yA....7...NtRaiseHardError.n |
| 2db00 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 2db20 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 | 2991..............0.......41.... |
| 2db40 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 38 01 04 00 4e 74 52 65 61 64 | ....`.......d.?.yA....8...NtRead |
| 2db60 | 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | File.ntdll.dll..ntdll.dll/...... |
| 2db80 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2dba0 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 39 01 04 00 | 48........`.......d.?.yA....9... |
| 2dbc0 | 4e 74 52 65 61 64 46 69 6c 65 53 63 61 74 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | NtReadFileScatter.ntdll.dll.ntdl |
| 2dbe0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2dc00 | 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......48........`.......d. |
| 2dc20 | 3f ac 79 41 1c 00 00 00 3a 01 04 00 4e 74 52 65 61 64 52 65 71 75 65 73 74 44 61 74 61 00 6e 74 | ?.yA....:...NtReadRequestData.nt |
| 2dc40 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2dc60 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 2dc80 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 3b 01 04 00 4e 74 52 65 61 64 56 69 | ..`.......d.?.yA....;...NtReadVi |
| 2dca0 | 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | rtualMemory.ntdll.dll.ntdll.dll/ |
| 2dcc0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2dce0 | 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 | ......60........`.......d.?.yA(. |
| 2dd00 | 00 00 3c 01 04 00 4e 74 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 | ..<...NtRegisterThreadTerminateP |
| 2dd20 | 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ort.ntdll.dll.ntdll.dll/......10 |
| 2dd40 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 | 98492991..............0.......50 |
| 2dd60 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 3d 01 04 00 4e 74 | ........`.......d.?.yA....=...Nt |
| 2dd80 | 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ReleaseKeyedEvent.ntdll.dll.ntdl |
| 2dda0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2ddc0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......46........`.......d. |
| 2dde0 | 3f ac 79 41 1a 00 00 00 3e 01 04 00 4e 74 52 65 6c 65 61 73 65 4d 75 74 61 6e 74 00 6e 74 64 6c | ?.yA....>...NtReleaseMutant.ntdl |
| 2de00 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2de20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 | ..............0.......49........ |
| 2de40 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 3f 01 04 00 4e 74 52 65 6c 65 61 73 65 53 | `.......d.?.yA....?...NtReleaseS |
| 2de60 | 65 6d 61 70 68 6f 72 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | emaphore.ntdll.dll..ntdll.dll/.. |
| 2de80 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2dea0 | 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 | ....51........`.......d.?.yA.... |
| 2dec0 | 40 01 04 00 4e 74 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 | @...NtRemoveIoCompletion.ntdll.d |
| 2dee0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2df00 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a | ............0.......51........`. |
| 2df20 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 41 01 04 00 4e 74 52 65 6d 6f 76 65 50 72 6f 63 | ......d.?.yA....A...NtRemoveProc |
| 2df40 | 65 73 73 44 65 62 75 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | essDebug.ntdll.dll..ntdll.dll/.. |
| 2df60 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2df80 | 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 | ....42........`.......d.?.yA.... |
| 2dfa0 | 42 01 04 00 4e 74 52 65 6e 61 6d 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | B...NtRenameKey.ntdll.dll.ntdll. |
| 2dfc0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2dfe0 | 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......43........`.......d.?. |
| 2e000 | 79 41 17 00 00 00 43 01 04 00 4e 74 52 65 70 6c 61 63 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c | yA....C...NtReplaceKey.ntdll.dll |
| 2e020 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 2e040 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......42........`... |
| 2e060 | ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 44 01 04 00 4e 74 52 65 70 6c 79 50 6f 72 74 00 6e 74 | ....d.?.yA....D...NtReplyPort.nt |
| 2e080 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2e0a0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 2e0c0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 45 01 04 00 4e 74 52 65 70 6c 79 57 | ..`.......d.?.yA!...E...NtReplyW |
| 2e0e0 | 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | aitReceivePort.ntdll.dll..ntdll. |
| 2e100 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2e120 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 2e140 | 79 41 23 00 00 00 46 01 04 00 4e 74 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 | yA#...F...NtReplyWaitReceivePort |
| 2e160 | 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | Ex.ntdll.dll..ntdll.dll/......10 |
| 2e180 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 | 98492991..............0.......51 |
| 2e1a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 47 01 04 00 4e 74 | ........`.......d.?.yA....G...Nt |
| 2e1c0 | 52 65 70 6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ReplyWaitReplyPort.ntdll.dll..nt |
| 2e1e0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2e200 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......52........`....... |
| 2e220 | 64 86 3f ac 79 41 20 00 00 00 48 01 04 00 4e 74 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b | d.?.yA....H...NtRequestDeviceWak |
| 2e240 | 65 75 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eup.ntdll.dll.ntdll.dll/......10 |
| 2e260 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 | 98492991..............0.......44 |
| 2e280 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 49 01 04 00 4e 74 | ........`.......d.?.yA....I...Nt |
| 2e2a0 | 52 65 71 75 65 73 74 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | RequestPort.ntdll.dll.ntdll.dll/ |
| 2e2c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2e2e0 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 2e300 | 00 00 4a 01 04 00 4e 74 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 6e 74 64 | ..J...NtRequestWaitReplyPort.ntd |
| 2e320 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2e340 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 2e360 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 4b 01 04 00 4e 74 52 65 71 75 65 73 | ..`.......d.?.yA!...K...NtReques |
| 2e380 | 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | tWakeupLatency.ntdll.dll..ntdll. |
| 2e3a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2e3c0 | 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......43........`.......d.?. |
| 2e3e0 | 79 41 17 00 00 00 4c 01 04 00 4e 74 52 65 73 65 74 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c | yA....L...NtResetEvent.ntdll.dll |
| 2e400 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 2e420 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......48........`... |
| 2e440 | ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 4d 01 04 00 4e 74 52 65 73 65 74 57 72 69 74 65 57 61 | ....d.?.yA....M...NtResetWriteWa |
| 2e460 | 74 63 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | tch.ntdll.dll.ntdll.dll/......10 |
| 2e480 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 | 98492991..............0.......43 |
| 2e4a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 4e 01 04 00 4e 74 | ........`.......d.?.yA....N...Nt |
| 2e4c0 | 52 65 73 74 6f 72 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | RestoreKey.ntdll.dll..ntdll.dll/ |
| 2e4e0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2e500 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 2e520 | 00 00 4f 01 04 00 4e 74 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..O...NtResumeProcess.ntdll.dll. |
| 2e540 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2e560 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......45........`..... |
| 2e580 | 00 00 64 86 3f ac 79 41 19 00 00 00 50 01 04 00 4e 74 52 65 73 75 6d 65 54 68 72 65 61 64 00 6e | ..d.?.yA....P...NtResumeThread.n |
| 2e5a0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 2e5c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 | 2991..............0.......40.... |
| 2e5e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 51 01 04 00 4e 74 53 61 76 65 | ....`.......d.?.yA....Q...NtSave |
| 2e600 | 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | Key.ntdll.dll.ntdll.dll/......10 |
| 2e620 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 | 98492991..............0.......42 |
| 2e640 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 52 01 04 00 4e 74 | ........`.......d.?.yA....R...Nt |
| 2e660 | 53 61 76 65 4b 65 79 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | SaveKeyEx.ntdll.dll.ntdll.dll/.. |
| 2e680 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2e6a0 | 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 | ....47........`.......d.?.yA.... |
| 2e6c0 | 53 01 04 00 4e 74 53 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | S...NtSaveMergedKeys.ntdll.dll.. |
| 2e6e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2e700 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 2e720 | 00 00 64 86 3f ac 79 41 1e 00 00 00 54 01 04 00 4e 74 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 | ..d.?.yA....T...NtSecureConnectP |
| 2e740 | 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ort.ntdll.dll.ntdll.dll/......10 |
| 2e760 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 | 98492991..............0.......50 |
| 2e780 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 55 01 04 00 4e 74 | ........`.......d.?.yA....U...Nt |
| 2e7a0 | 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | SetBootEntryOrder.ntdll.dll.ntdl |
| 2e7c0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 2e7e0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 2e800 | 3f ac 79 41 1b 00 00 00 56 01 04 00 4e 74 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 6e 74 64 | ?.yA....V...NtSetBootOptions.ntd |
| 2e820 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2e840 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 | 91..............0.......49...... |
| 2e860 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 57 01 04 00 4e 74 53 65 74 43 6f 6e | ..`.......d.?.yA....W...NtSetCon |
| 2e880 | 74 65 78 74 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | textThread.ntdll.dll..ntdll.dll/ |
| 2e8a0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2e8c0 | 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 | ......52........`.......d.?.yA.. |
| 2e8e0 | 00 00 58 01 04 00 4e 74 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 6e 74 64 6c | ..X...NtSetDebugFilterState.ntdl |
| 2e900 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 2e920 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 | ..............0.......56........ |
| 2e940 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 59 01 04 00 4e 74 53 65 74 44 65 66 61 75 | `.......d.?.yA$...Y...NtSetDefau |
| 2e960 | 6c 74 48 61 72 64 45 72 72 6f 72 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ltHardErrorPort.ntdll.dll.ntdll. |
| 2e980 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2e9a0 | 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......49........`.......d.?. |
| 2e9c0 | 79 41 1d 00 00 00 5a 01 04 00 4e 74 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 6e 74 64 | yA....Z...NtSetDefaultLocale.ntd |
| 2e9e0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2ea00 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 2ea20 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 5b 01 04 00 4e 74 53 65 74 44 65 66 | ..`.......d.?.yA!...[...NtSetDef |
| 2ea40 | 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | aultUILanguage.ntdll.dll..ntdll. |
| 2ea60 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2ea80 | 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......52........`.......d.?. |
| 2eaa0 | 79 41 20 00 00 00 5c 01 04 00 4e 74 53 65 74 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 | yA....\...NtSetDriverEntryOrder. |
| 2eac0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 2eae0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 | 2991..............0.......42.... |
| 2eb00 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 5d 01 04 00 4e 74 53 65 74 45 | ....`.......d.?.yA....]...NtSetE |
| 2eb20 | 61 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | aFile.ntdll.dll.ntdll.dll/...... |
| 2eb40 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2eb60 | 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 5e 01 04 00 | 41........`.......d.?.yA....^... |
| 2eb80 | 4e 74 53 65 74 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | NtSetEvent.ntdll.dll..ntdll.dll/ |
| 2eba0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2ebc0 | 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 | ......54........`.......d.?.yA". |
| 2ebe0 | 00 00 5f 01 04 00 4e 74 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 6f 72 69 74 79 00 6e 74 | .._...NtSetEventBoostPriority.nt |
| 2ec00 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 2ec20 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 | 91..............0.......49...... |
| 2ec40 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 60 01 04 00 4e 74 53 65 74 48 69 67 | ..`.......d.?.yA....`...NtSetHig |
| 2ec60 | 68 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | hEventPair.ntdll.dll..ntdll.dll/ |
| 2ec80 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2eca0 | 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 | ......56........`.......d.?.yA$. |
| 2ecc0 | 00 00 61 01 04 00 4e 74 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 | ..a...NtSetHighWaitLowEventPair. |
| 2ece0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 2ed00 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 | 2991..............0.......58.... |
| 2ed20 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 62 01 04 00 4e 74 53 65 74 49 | ....`.......d.?.yA&...b...NtSetI |
| 2ed40 | 6e 66 6f 72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | nformationDebugObject.ntdll.dll. |
| 2ed60 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2ed80 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 2eda0 | 00 00 64 86 3f ac 79 41 1f 00 00 00 63 01 04 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e | ..d.?.yA....c...NtSetInformation |
| 2edc0 | 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | File.ntdll.dll..ntdll.dll/...... |
| 2ede0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2ee00 | 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 64 01 04 00 | 56........`.......d.?.yA$...d... |
| 2ee20 | 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e | NtSetInformationJobObject.ntdll. |
| 2ee40 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 2ee60 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a | ............0.......50........`. |
| 2ee80 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 65 01 04 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 | ......d.?.yA....e...NtSetInforma |
| 2eea0 | 74 69 6f 6e 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | tionKey.ntdll.dll.ntdll.dll/.... |
| 2eec0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2eee0 | 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 66 01 | ..53........`.......d.?.yA!...f. |
| 2ef00 | 04 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 | ..NtSetInformationObject.ntdll.d |
| 2ef20 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2ef40 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a | ............0.......54........`. |
| 2ef60 | 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 67 01 04 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 | ......d.?.yA"...g...NtSetInforma |
| 2ef80 | 74 69 6f 6e 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | tionProcess.ntdll.dll.ntdll.dll/ |
| 2efa0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2efc0 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 2efe0 | 00 00 68 01 04 00 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 6e 74 64 | ..h...NtSetInformationThread.ntd |
| 2f000 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2f020 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 | 91..............0.......52...... |
| 2f040 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 69 01 04 00 4e 74 53 65 74 49 6e 66 | ..`.......d.?.yA....i...NtSetInf |
| 2f060 | 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ormationToken.ntdll.dll.ntdll.dl |
| 2f080 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2f0a0 | 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......51........`.......d.?.yA |
| 2f0c0 | 1f 00 00 00 6a 01 04 00 4e 74 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 6e 74 64 | ....j...NtSetIntervalProfile.ntd |
| 2f0e0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2f100 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 | 91..............0.......48...... |
| 2f120 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 6b 01 04 00 4e 74 53 65 74 49 6f 43 | ..`.......d.?.yA....k...NtSetIoC |
| 2f140 | 6f 6d 70 6c 65 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ompletion.ntdll.dll.ntdll.dll/.. |
| 2f160 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2f180 | 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 | ....46........`.......d.?.yA.... |
| 2f1a0 | 6c 01 04 00 4e 74 53 65 74 4c 64 74 45 6e 74 72 69 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | l...NtSetLdtEntries.ntdll.dll.nt |
| 2f1c0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2f1e0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......48........`....... |
| 2f200 | 64 86 3f ac 79 41 1c 00 00 00 6d 01 04 00 4e 74 53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 | d.?.yA....m...NtSetLowEventPair. |
| 2f220 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 2f240 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 | 2991..............0.......56.... |
| 2f260 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 6e 01 04 00 4e 74 53 65 74 4c | ....`.......d.?.yA$...n...NtSetL |
| 2f280 | 6f 77 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | owWaitHighEventPair.ntdll.dll.nt |
| 2f2a0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2f2c0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......56........`....... |
| 2f2e0 | 64 86 3f ac 79 41 24 00 00 00 6f 01 04 00 4e 74 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 | d.?.yA$...o...NtSetQuotaInformat |
| 2f300 | 69 6f 6e 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ionFile.ntdll.dll.ntdll.dll/.... |
| 2f320 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2f340 | 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 70 01 | ..50........`.......d.?.yA....p. |
| 2f360 | 04 00 4e 74 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..NtSetSecurityObject.ntdll.dll. |
| 2f380 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2f3a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......58........`..... |
| 2f3c0 | 00 00 64 86 3f ac 79 41 26 00 00 00 71 01 04 00 4e 74 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 | ..d.?.yA&...q...NtSetSystemEnvir |
| 2f3e0 | 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | onmentValue.ntdll.dll.ntdll.dll/ |
| 2f400 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2f420 | 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 | ......60........`.......d.?.yA(. |
| 2f440 | 00 00 72 01 04 00 4e 74 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 | ..r...NtSetSystemEnvironmentValu |
| 2f460 | 65 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eEx.ntdll.dll.ntdll.dll/......10 |
| 2f480 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 | 98492991..............0.......53 |
| 2f4a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 73 01 04 00 4e 74 | ........`.......d.?.yA!...s...Nt |
| 2f4c0 | 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | SetSystemInformation.ntdll.dll.. |
| 2f4e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2f500 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 2f520 | 00 00 64 86 3f ac 79 41 20 00 00 00 74 01 04 00 4e 74 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 | ..d.?.yA....t...NtSetSystemPower |
| 2f540 | 53 74 61 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | State.ntdll.dll.ntdll.dll/...... |
| 2f560 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2f580 | 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 75 01 04 00 | 46........`.......d.?.yA....u... |
| 2f5a0 | 4e 74 53 65 74 53 79 73 74 65 6d 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | NtSetSystemTime.ntdll.dll.ntdll. |
| 2f5c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2f5e0 | 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......56........`.......d.?. |
| 2f600 | 79 41 24 00 00 00 76 01 04 00 4e 74 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 | yA$...v...NtSetThreadExecutionSt |
| 2f620 | 61 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ate.ntdll.dll.ntdll.dll/......10 |
| 2f640 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 | 98492991..............0.......41 |
| 2f660 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 77 01 04 00 4e 74 | ........`.......d.?.yA....w...Nt |
| 2f680 | 53 65 74 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | SetTimer.ntdll.dll..ntdll.dll/.. |
| 2f6a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2f6c0 | 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 | ....51........`.......d.?.yA.... |
| 2f6e0 | 78 01 04 00 4e 74 53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 | x...NtSetTimerResolution.ntdll.d |
| 2f700 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 2f720 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a | ............0.......44........`. |
| 2f740 | 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 79 01 04 00 4e 74 53 65 74 55 75 69 64 53 65 65 | ......d.?.yA....y...NtSetUuidSee |
| 2f760 | 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | d.ntdll.dll.ntdll.dll/......1098 |
| 2f780 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 | 492991..............0.......44.. |
| 2f7a0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 7a 01 04 00 4e 74 53 65 | ......`.......d.?.yA....z...NtSe |
| 2f7c0 | 74 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | tValueKey.ntdll.dll.ntdll.dll/.. |
| 2f7e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 2f800 | 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 | ....57........`.......d.?.yA%... |
| 2f820 | 7b 01 04 00 4e 74 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 6e | {...NtSetVolumeInformationFile.n |
| 2f840 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 2f860 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 | 2991..............0.......47.... |
| 2f880 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 7c 01 04 00 4e 74 53 68 75 74 | ....`.......d.?.yA....|...NtShut |
| 2f8a0 | 64 6f 77 6e 53 79 73 74 65 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | downSystem.ntdll.dll..ntdll.dll/ |
| 2f8c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 2f8e0 | 20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 | ......61........`.......d.?.yA). |
| 2f900 | 00 00 7d 01 04 00 4e 74 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 | ..}...NtSignalAndWaitForSingleOb |
| 2f920 | 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ject.ntdll.dll..ntdll.dll/...... |
| 2f940 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 2f960 | 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 7e 01 04 00 | 45........`.......d.?.yA....~... |
| 2f980 | 4e 74 53 74 61 72 74 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | NtStartProfile.ntdll.dll..ntdll. |
| 2f9a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 2f9c0 | 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......44........`.......d.?. |
| 2f9e0 | 79 41 18 00 00 00 7f 01 04 00 4e 74 53 74 6f 70 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c | yA........NtStopProfile.ntdll.dl |
| 2fa00 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 2fa20 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......47........`... |
| 2fa40 | ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 80 01 04 00 4e 74 53 75 73 70 65 6e 64 50 72 6f 63 65 | ....d.?.yA........NtSuspendProce |
| 2fa60 | 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ss.ntdll.dll..ntdll.dll/......10 |
| 2fa80 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 | 98492991..............0.......46 |
| 2faa0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 81 01 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2fac0 | 53 75 73 70 65 6e 64 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | SuspendThread.ntdll.dll.ntdll.dl |
| 2fae0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2fb00 | 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......51........`.......d.?.yA |
| 2fb20 | 1f 00 00 00 82 01 04 00 4e 74 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 00 6e 74 64 | ........NtSystemDebugControl.ntd |
| 2fb40 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 2fb60 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 | 91..............0.......51...... |
| 2fb80 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 83 01 04 00 4e 74 54 65 72 6d 69 6e | ..`.......d.?.yA........NtTermin |
| 2fba0 | 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ateJobObject.ntdll.dll..ntdll.dl |
| 2fbc0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2fbe0 | 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......49........`.......d.?.yA |
| 2fc00 | 1d 00 00 00 84 01 04 00 4e 74 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c | ........NtTerminateProcess.ntdll |
| 2fc20 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 2fc40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 | ..............0.......48........ |
| 2fc60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 85 01 04 00 4e 74 54 65 72 6d 69 6e 61 74 | `.......d.?.yA........NtTerminat |
| 2fc80 | 65 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | eThread.ntdll.dll.ntdll.dll/.... |
| 2fca0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 2fcc0 | 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 86 01 | ..42........`.......d.?.yA...... |
| 2fce0 | 04 00 4e 74 54 65 73 74 41 6c 65 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ..NtTestAlert.ntdll.dll.ntdll.dl |
| 2fd00 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2fd20 | 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......43........`.......d.?.yA |
| 2fd40 | 17 00 00 00 87 01 04 00 4e 74 54 72 61 63 65 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ........NtTraceEvent.ntdll.dll.. |
| 2fd60 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 2fd80 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 2fda0 | 00 00 64 86 3f ac 79 41 1e 00 00 00 88 01 04 00 4e 74 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 | ..d.?.yA........NtTranslateFileP |
| 2fdc0 | 61 74 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ath.ntdll.dll.ntdll.dll/......10 |
| 2fde0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 | 98492991..............0.......45 |
| 2fe00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 89 01 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2fe20 | 55 6e 6c 6f 61 64 44 72 69 76 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | UnloadDriver.ntdll.dll..ntdll.dl |
| 2fe40 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 2fe60 | 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......42........`.......d.?.yA |
| 2fe80 | 16 00 00 00 8a 01 04 00 4e 74 55 6e 6c 6f 61 64 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ........NtUnloadKey.ntdll.dll.nt |
| 2fea0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 2fec0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......43........`....... |
| 2fee0 | 64 86 3f ac 79 41 17 00 00 00 8b 01 04 00 4e 74 55 6e 6c 6f 61 64 4b 65 79 32 00 6e 74 64 6c 6c | d.?.yA........NtUnloadKey2.ntdll |
| 2ff00 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 2ff20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 | ..............0.......44........ |
| 2ff40 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 8c 01 04 00 4e 74 55 6e 6c 6f 61 64 4b 65 | `.......d.?.yA........NtUnloadKe |
| 2ff60 | 79 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | yEx.ntdll.dll.ntdll.dll/......10 |
| 2ff80 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 | 98492991..............0.......43 |
| 2ffa0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 8d 01 04 00 4e 74 | ........`.......d.?.yA........Nt |
| 2ffc0 | 55 6e 6c 6f 63 6b 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | UnlockFile.ntdll.dll..ntdll.dll/ |
| 2ffe0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 30000 | 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 | ......52........`.......d.?.yA.. |
| 30020 | 00 00 8e 01 04 00 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c | ......NtUnlockVirtualMemory.ntdl |
| 30040 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 30060 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 | ..............0.......51........ |
| 30080 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 8f 01 04 00 4e 74 55 6e 6d 61 70 56 69 65 | `.......d.?.yA........NtUnmapVie |
| 300a0 | 77 4f 66 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | wOfSection.ntdll.dll..ntdll.dll/ |
| 300c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 300e0 | 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 | ......43........`.......d.?.yA.. |
| 30100 | 00 00 90 01 04 00 4e 74 56 64 6d 43 6f 6e 74 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ......NtVdmControl.ntdll.dll..nt |
| 30120 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 30140 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......50........`....... |
| 30160 | 64 86 3f ac 79 41 1e 00 00 00 91 01 04 00 4e 74 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e | d.?.yA........NtWaitForDebugEven |
| 30180 | 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | t.ntdll.dll.ntdll.dll/......1098 |
| 301a0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 301c0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 92 01 04 00 4e 74 57 61 | ......`.......d.?.yA........NtWa |
| 301e0 | 69 74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | itForKeyedEvent.ntdll.dll.ntdll. |
| 30200 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 30220 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 30240 | 79 41 23 00 00 00 93 01 04 00 4e 74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 | yA#.......NtWaitForMultipleObjec |
| 30260 | 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ts.ntdll.dll..ntdll.dll/......10 |
| 30280 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 | 98492991..............0.......57 |
| 302a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 94 01 04 00 4e 74 | ........`.......d.?.yA%.......Nt |
| 302c0 | 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 33 32 00 6e 74 64 6c 6c 2e 64 | WaitForMultipleObjects32.ntdll.d |
| 302e0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 30300 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a | ............0.......52........`. |
| 30320 | 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 95 01 04 00 4e 74 57 61 69 74 46 6f 72 53 69 6e | ......d.?.yA........NtWaitForSin |
| 30340 | 67 6c 65 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | gleObject.ntdll.dll.ntdll.dll/.. |
| 30360 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 30380 | 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 | ....50........`.......d.?.yA.... |
| 303a0 | 96 01 04 00 4e 74 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c | ....NtWaitHighEventPair.ntdll.dl |
| 303c0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 303e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......49........`... |
| 30400 | ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 97 01 04 00 4e 74 57 61 69 74 4c 6f 77 45 76 65 6e 74 | ....d.?.yA........NtWaitLowEvent |
| 30420 | 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Pair.ntdll.dll..ntdll.dll/...... |
| 30440 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 30460 | 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 98 01 04 00 | 42........`.......d.?.yA........ |
| 30480 | 4e 74 57 72 69 74 65 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | NtWriteFile.ntdll.dll.ntdll.dll/ |
| 304a0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 304c0 | 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 | ......48........`.......d.?.yA.. |
| 304e0 | 00 00 99 01 04 00 4e 74 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 6e 74 64 6c 6c 2e 64 6c | ......NtWriteFileGather.ntdll.dl |
| 30500 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 30520 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......49........`... |
| 30540 | ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 9a 01 04 00 4e 74 57 72 69 74 65 52 65 71 75 65 73 74 | ....d.?.yA........NtWriteRequest |
| 30560 | 44 61 74 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Data.ntdll.dll..ntdll.dll/...... |
| 30580 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 305a0 | 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 9b 01 04 00 | 51........`.......d.?.yA........ |
| 305c0 | 4e 74 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | NtWriteVirtualMemory.ntdll.dll.. |
| 305e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 30600 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......47........`..... |
| 30620 | 00 00 64 86 3f ac 79 41 1b 00 00 00 9c 01 04 00 4e 74 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e | ..d.?.yA........NtYieldExecution |
| 30640 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 30660 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 | 492991..............0.......44.. |
| 30680 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 9d 01 04 00 50 66 78 46 | ......`.......d.?.yA........PfxF |
| 306a0 | 69 6e 64 50 72 65 66 69 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | indPrefix.ntdll.dll.ntdll.dll/.. |
| 306c0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 306e0 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 30700 | 9e 01 04 00 50 66 78 49 6e 69 74 69 61 6c 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....PfxInitialize.ntdll.dll.ntdl |
| 30720 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 30740 | 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......46........`.......d. |
| 30760 | 3f ac 79 41 1a 00 00 00 9f 01 04 00 50 66 78 49 6e 73 65 72 74 50 72 65 66 69 78 00 6e 74 64 6c | ?.yA........PfxInsertPrefix.ntdl |
| 30780 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 307a0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 | ..............0.......46........ |
| 307c0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 a0 01 04 00 50 66 78 52 65 6d 6f 76 65 50 | `.......d.?.yA........PfxRemoveP |
| 307e0 | 72 65 66 69 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | refix.ntdll.dll.ntdll.dll/...... |
| 30800 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 30820 | 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 a2 01 04 00 | 44........`.......d.?.yA........ |
| 30840 | 52 74 6c 41 62 6f 72 74 52 58 61 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | RtlAbortRXact.ntdll.dll.ntdll.dl |
| 30860 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 30880 | 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......58........`.......d.?.yA |
| 308a0 | 26 00 00 00 a3 01 04 00 52 74 6c 41 62 73 6f 6c 75 74 65 54 6f 53 65 6c 66 52 65 6c 61 74 69 76 | &.......RtlAbsoluteToSelfRelativ |
| 308c0 | 65 53 44 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eSD.ntdll.dll.ntdll.dll/......10 |
| 308e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 | 98492991..............0.......48 |
| 30900 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 a4 01 04 00 52 74 | ........`.......d.?.yA........Rt |
| 30920 | 6c 41 63 71 75 69 72 65 50 65 62 4c 6f 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | lAcquirePebLock.ntdll.dll.ntdll. |
| 30940 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 30960 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 30980 | 79 41 1e 00 00 00 a5 01 04 00 52 74 6c 41 63 71 75 69 72 65 50 72 69 76 69 6c 65 67 65 00 6e 74 | yA........RtlAcquirePrivilege.nt |
| 309a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 309c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 | 91..............0.......58...... |
| 309e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 a6 01 04 00 52 74 6c 41 63 71 75 69 | ..`.......d.?.yA&.......RtlAcqui |
| 30a00 | 72 65 52 65 73 6f 75 72 63 65 45 78 63 6c 75 73 69 76 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | reResourceExclusive.ntdll.dll.nt |
| 30a20 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 30a40 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......55........`....... |
| 30a60 | 64 86 3f ac 79 41 23 00 00 00 a7 01 04 00 52 74 6c 41 63 71 75 69 72 65 52 65 73 6f 75 72 63 65 | d.?.yA#.......RtlAcquireResource |
| 30a80 | 53 68 61 72 65 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Shared.ntdll.dll..ntdll.dll/.... |
| 30aa0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 30ac0 | 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 a8 01 | ..59........`.......d.?.yA'..... |
| 30ae0 | 04 00 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 6e | ..RtlActivateActivationContext.n |
| 30b00 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 30b20 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 | 2991..............0.......61.... |
| 30b40 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 a9 01 04 00 52 74 6c 41 63 74 | ....`.......d.?.yA).......RtlAct |
| 30b60 | 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 45 78 00 6e 74 64 6c 6c 2e 64 | ivateActivationContextEx.ntdll.d |
| 30b80 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 30ba0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 39 20 20 20 20 20 20 20 20 60 0a | ............0.......69........`. |
| 30bc0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 31 00 00 00 aa 01 04 00 52 74 6c 41 63 74 69 76 61 74 65 41 | ......d.?.yA1.......RtlActivateA |
| 30be0 | 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 00 6e 74 64 6c 6c | ctivationContextUnsafeFast.ntdll |
| 30c00 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 30c20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 30c40 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 ab 01 04 00 52 74 6c 41 64 64 41 63 63 65 | `.......d.?.yA!.......RtlAddAcce |
| 30c60 | 73 73 41 6c 6c 6f 77 65 64 41 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ssAllowedAce.ntdll.dll..ntdll.dl |
| 30c80 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 30ca0 | 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......55........`.......d.?.yA |
| 30cc0 | 23 00 00 00 ac 01 04 00 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 41 63 65 45 78 | #.......RtlAddAccessAllowedAceEx |
| 30ce0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 30d00 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 | 492991..............0.......59.. |
| 30d20 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 ad 01 04 00 52 74 6c 41 | ......`.......d.?.yA'.......RtlA |
| 30d40 | 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 4f 62 6a 65 63 74 41 63 65 00 6e 74 64 6c 6c 2e 64 | ddAccessAllowedObjectAce.ntdll.d |
| 30d60 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 30d80 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a | ............0.......52........`. |
| 30da0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 ae 01 04 00 52 74 6c 41 64 64 41 63 63 65 73 73 | ......d.?.yA........RtlAddAccess |
| 30dc0 | 44 65 6e 69 65 64 41 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | DeniedAce.ntdll.dll.ntdll.dll/.. |
| 30de0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 30e00 | 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 | ....54........`.......d.?.yA"... |
| 30e20 | af 01 04 00 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65 45 78 00 6e 74 64 6c | ....RtlAddAccessDeniedAceEx.ntdl |
| 30e40 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 30e60 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 | ..............0.......58........ |
| 30e80 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 b0 01 04 00 52 74 6c 41 64 64 41 63 63 65 | `.......d.?.yA&.......RtlAddAcce |
| 30ea0 | 73 73 44 65 6e 69 65 64 4f 62 6a 65 63 74 41 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ssDeniedObjectAce.ntdll.dll.ntdl |
| 30ec0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 30ee0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......40........`.......d. |
| 30f00 | 3f ac 79 41 14 00 00 00 b1 01 04 00 52 74 6c 41 64 64 41 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ?.yA........RtlAddAce.ntdll.dll. |
| 30f20 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 30f40 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 30f60 | 00 00 64 86 3f ac 79 41 1e 00 00 00 b2 01 04 00 52 74 6c 41 64 64 41 63 74 69 6f 6e 54 6f 52 58 | ..d.?.yA........RtlAddActionToRX |
| 30f80 | 61 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | act.ntdll.dll.ntdll.dll/......10 |
| 30fa0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 | 98492991..............0.......52 |
| 30fc0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 b3 01 04 00 52 74 | ........`.......d.?.yA........Rt |
| 30fe0 | 6c 41 64 64 41 74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | lAddAtomToAtomTable.ntdll.dll.nt |
| 31000 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 31020 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......59........`....... |
| 31040 | 64 86 3f ac 79 41 27 00 00 00 b4 01 04 00 52 74 6c 41 64 64 41 74 74 72 69 62 75 74 65 41 63 74 | d.?.yA'.......RtlAddAttributeAct |
| 31060 | 69 6f 6e 54 6f 52 58 61 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ionToRXact.ntdll.dll..ntdll.dll/ |
| 31080 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 310a0 | 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 | ......51........`.......d.?.yA.. |
| 310c0 | 00 00 b5 01 04 00 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 41 63 65 00 6e 74 64 6c 6c | ......RtlAddAuditAccessAce.ntdll |
| 310e0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 31100 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 31120 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 b6 01 04 00 52 74 6c 41 64 64 41 75 64 69 | `.......d.?.yA!.......RtlAddAudi |
| 31140 | 74 41 63 63 65 73 73 41 63 65 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | tAccessAceEx.ntdll.dll..ntdll.dl |
| 31160 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 31180 | 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......57........`.......d.?.yA |
| 311a0 | 25 00 00 00 b7 01 04 00 52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 4f 62 6a 65 63 74 41 | %.......RtlAddAuditAccessObjectA |
| 311c0 | 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ce.ntdll.dll..ntdll.dll/......10 |
| 311e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 | 98492991..............0.......48 |
| 31200 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 b8 01 04 00 52 74 | ........`.......d.?.yA........Rt |
| 31220 | 6c 41 64 64 43 6f 6d 70 6f 75 6e 64 41 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | lAddCompoundAce.ntdll.dll.ntdll. |
| 31240 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 31260 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 31280 | 79 41 1e 00 00 00 b9 01 04 00 52 74 6c 41 64 64 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 6e 74 | yA........RtlAddFunctionTable.nt |
| 312a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 312c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 | 91..............0.......57...... |
| 312e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 ba 01 04 00 52 74 6c 41 64 64 52 65 | ..`.......d.?.yA%.......RtlAddRe |
| 31300 | 66 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | fActivationContext.ntdll.dll..nt |
| 31320 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 31340 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......52........`....... |
| 31360 | 64 86 3f ac 79 41 20 00 00 00 bb 01 04 00 52 74 6c 41 64 64 52 65 66 4d 65 6d 6f 72 79 53 74 72 | d.?.yA........RtlAddRefMemoryStr |
| 31380 | 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eam.ntdll.dll.ntdll.dll/......10 |
| 313a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 | 98492991..............0.......60 |
| 313c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 bc 01 04 00 52 74 | ........`.......d.?.yA(.......Rt |
| 313e0 | 6c 41 64 64 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 00 6e 74 64 6c | lAddVectoredContinueHandler.ntdl |
| 31400 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 31420 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20 | ..............0.......61........ |
| 31440 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 bd 01 04 00 52 74 6c 41 64 64 56 65 63 74 | `.......d.?.yA).......RtlAddVect |
| 31460 | 6f 72 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | oredExceptionHandler.ntdll.dll.. |
| 31480 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 314a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......55........`..... |
| 314c0 | 00 00 64 86 3f ac 79 41 23 00 00 00 be 01 04 00 52 74 6c 41 64 64 72 65 73 73 49 6e 53 65 63 74 | ..d.?.yA#.......RtlAddressInSect |
| 314e0 | 69 6f 6e 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ionTable.ntdll.dll..ntdll.dll/.. |
| 31500 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 31520 | 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 | ....49........`.......d.?.yA.... |
| 31540 | bf 01 04 00 52 74 6c 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c | ....RtlAdjustPrivilege.ntdll.dll |
| 31560 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 31580 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......64........`... |
| 315a0 | ff ff 00 00 64 86 3f ac 79 41 2c 00 00 00 c0 01 04 00 52 74 6c 41 6c 6c 6f 63 61 74 65 41 63 74 | ....d.?.yA,.......RtlAllocateAct |
| 315c0 | 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ivationContextStack.ntdll.dll.nt |
| 315e0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 31600 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......58........`....... |
| 31620 | 64 86 3f ac 79 41 26 00 00 00 c1 01 04 00 52 74 6c 41 6c 6c 6f 63 61 74 65 41 6e 64 49 6e 69 74 | d.?.yA&.......RtlAllocateAndInit |
| 31640 | 69 61 6c 69 7a 65 53 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ializeSid.ntdll.dll.ntdll.dll/.. |
| 31660 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 31680 | 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 | ....48........`.......d.?.yA.... |
| 316a0 | c2 01 04 00 52 74 6c 41 6c 6c 6f 63 61 74 65 48 61 6e 64 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ....RtlAllocateHandle.ntdll.dll. |
| 316c0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 316e0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......46........`..... |
| 31700 | 00 00 64 86 3f ac 79 41 1a 00 00 00 c3 01 04 00 52 74 6c 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 | ..d.?.yA........RtlAllocateHeap. |
| 31720 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 31740 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 | 2991..............0.......55.... |
| 31760 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 c4 01 04 00 52 74 6c 41 6e 73 | ....`.......d.?.yA#.......RtlAns |
| 31780 | 69 43 68 61 72 54 6f 55 6e 69 63 6f 64 65 43 68 61 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | iCharToUnicodeChar.ntdll.dll..nt |
| 317a0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 317c0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......57........`....... |
| 317e0 | 64 86 3f ac 79 41 25 00 00 00 c5 01 04 00 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 | d.?.yA%.......RtlAnsiStringToUni |
| 31800 | 63 6f 64 65 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | codeSize.ntdll.dll..ntdll.dll/.. |
| 31820 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 31840 | 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 | ....59........`.......d.?.yA'... |
| 31860 | c6 01 04 00 52 74 6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | ....RtlAnsiStringToUnicodeString |
| 31880 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 318a0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 | 492991..............0.......54.. |
| 318c0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 c7 01 04 00 52 74 6c 41 | ......`.......d.?.yA".......RtlA |
| 318e0 | 70 70 65 6e 64 41 73 63 69 69 7a 54 6f 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ppendAsciizToString.ntdll.dll.nt |
| 31900 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 31920 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 31940 | 64 86 3f ac 79 41 1f 00 00 00 c8 01 04 00 52 74 6c 41 70 70 65 6e 64 50 61 74 68 45 6c 65 6d 65 | d.?.yA........RtlAppendPathEleme |
| 31960 | 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | nt.ntdll.dll..ntdll.dll/......10 |
| 31980 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 319a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 c9 01 04 00 52 74 | ........`.......d.?.yA".......Rt |
| 319c0 | 6c 41 70 70 65 6e 64 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | lAppendStringToString.ntdll.dll. |
| 319e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 31a00 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......61........`..... |
| 31a20 | 00 00 64 86 3f ac 79 41 29 00 00 00 ca 01 04 00 52 74 6c 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 | ..d.?.yA).......RtlAppendUnicode |
| 31a40 | 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | StringToString.ntdll.dll..ntdll. |
| 31a60 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 31a80 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 31aa0 | 79 41 23 00 00 00 cb 01 04 00 52 74 6c 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 54 6f 53 74 72 69 | yA#.......RtlAppendUnicodeToStri |
| 31ac0 | 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ng.ntdll.dll..ntdll.dll/......10 |
| 31ae0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 | 98492991..............0.......57 |
| 31b00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 cc 01 04 00 52 74 | ........`.......d.?.yA%.......Rt |
| 31b20 | 6c 41 70 70 6c 69 63 61 74 69 6f 6e 56 65 72 69 66 69 65 72 53 74 6f 70 00 6e 74 64 6c 6c 2e 64 | lApplicationVerifierStop.ntdll.d |
| 31b40 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 31b60 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a | ............0.......44........`. |
| 31b80 | 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 cd 01 04 00 52 74 6c 41 70 70 6c 79 52 58 61 63 | ......d.?.yA........RtlApplyRXac |
| 31ba0 | 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | t.ntdll.dll.ntdll.dll/......1098 |
| 31bc0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 | 492991..............0.......51.. |
| 31be0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 ce 01 04 00 52 74 6c 41 | ......`.......d.?.yA........RtlA |
| 31c00 | 70 70 6c 79 52 58 61 63 74 4e 6f 46 6c 75 73 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | pplyRXactNoFlush.ntdll.dll..ntdl |
| 31c20 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 31c40 | 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......55........`.......d. |
| 31c60 | 3f ac 79 41 23 00 00 00 cf 01 04 00 52 74 6c 41 72 65 41 6c 6c 41 63 63 65 73 73 65 73 47 72 61 | ?.yA#.......RtlAreAllAccessesGra |
| 31c80 | 6e 74 65 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | nted.ntdll.dll..ntdll.dll/...... |
| 31ca0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 31cc0 | 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 d0 01 04 00 | 55........`.......d.?.yA#....... |
| 31ce0 | 52 74 6c 41 72 65 41 6e 79 41 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 00 6e 74 64 6c 6c 2e 64 | RtlAreAnyAccessesGranted.ntdll.d |
| 31d00 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 31d20 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a | ............0.......46........`. |
| 31d40 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 d1 01 04 00 52 74 6c 41 72 65 42 69 74 73 43 6c | ......d.?.yA........RtlAreBitsCl |
| 31d60 | 65 61 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ear.ntdll.dll.ntdll.dll/......10 |
| 31d80 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 | 98492991..............0.......44 |
| 31da0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 d2 01 04 00 52 74 | ........`.......d.?.yA........Rt |
| 31dc0 | 6c 41 72 65 42 69 74 73 53 65 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | lAreBitsSet.ntdll.dll.ntdll.dll/ |
| 31de0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 31e00 | 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 | ......40........`.......d.?.yA.. |
| 31e20 | 00 00 d3 01 04 00 52 74 6c 41 73 73 65 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ......RtlAssert.ntdll.dll.ntdll. |
| 31e40 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 31e60 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 31e80 | 79 41 19 00 00 00 d4 01 04 00 52 74 6c 43 61 6e 63 65 6c 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 | yA........RtlCancelTimer.ntdll.d |
| 31ea0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 31ec0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a | ............0.......48........`. |
| 31ee0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 d5 01 04 00 52 74 6c 43 61 70 74 75 72 65 43 6f | ......d.?.yA........RtlCaptureCo |
| 31f00 | 6e 74 65 78 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ntext.ntdll.dll.ntdll.dll/...... |
| 31f20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 31f40 | 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 d6 01 04 00 | 55........`.......d.?.yA#....... |
| 31f60 | 52 74 6c 43 61 70 74 75 72 65 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 6e 74 64 6c 6c 2e 64 | RtlCaptureStackBackTrace.ntdll.d |
| 31f80 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 31fa0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a | ............0.......47........`. |
| 31fc0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 d7 01 04 00 52 74 6c 43 68 61 72 54 6f 49 6e 74 | ......d.?.yA........RtlCharToInt |
| 31fe0 | 65 67 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eger.ntdll.dll..ntdll.dll/...... |
| 32000 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 32020 | 36 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2e 00 00 00 d8 01 04 00 | 66........`.......d.?.yA........ |
| 32040 | 52 74 6c 43 68 65 63 6b 46 6f 72 4f 72 70 68 61 6e 65 64 43 72 69 74 69 63 61 6c 53 65 63 74 69 | RtlCheckForOrphanedCriticalSecti |
| 32060 | 6f 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ons.ntdll.dll.ntdll.dll/......10 |
| 32080 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 320a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 d9 01 04 00 52 74 | ........`.......d.?.yA$.......Rt |
| 320c0 | 6c 43 68 65 63 6b 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 6e 74 64 6c 6c 2e 64 6c | lCheckProcessParameters.ntdll.dl |
| 320e0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 32100 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......50........`... |
| 32120 | ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 da 01 04 00 52 74 6c 43 68 65 63 6b 52 65 67 69 73 74 | ....d.?.yA........RtlCheckRegist |
| 32140 | 72 79 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ryKey.ntdll.dll.ntdll.dll/...... |
| 32160 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 32180 | 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 db 01 04 00 | 46........`.......d.?.yA........ |
| 321a0 | 52 74 6c 43 6c 65 61 72 41 6c 6c 42 69 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | RtlClearAllBits.ntdll.dll.ntdll. |
| 321c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 321e0 | 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......43........`.......d.?. |
| 32200 | 79 41 17 00 00 00 dc 01 04 00 52 74 6c 43 6c 65 61 72 42 69 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c | yA........RtlClearBits.ntdll.dll |
| 32220 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 32240 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......51........`... |
| 32260 | ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 dd 01 04 00 52 74 6c 43 6c 6f 6e 65 4d 65 6d 6f 72 79 | ....d.?.yA........RtlCloneMemory |
| 32280 | 53 74 72 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Stream.ntdll.dll..ntdll.dll/.... |
| 322a0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 322c0 | 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 de 01 | ..52........`.......d.?.yA...... |
| 322e0 | 04 00 52 74 6c 43 6f 6d 6d 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c | ..RtlCommitMemoryStream.ntdll.dl |
| 32300 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 32320 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......45........`... |
| 32340 | ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 df 01 04 00 52 74 6c 43 6f 6d 70 61 63 74 48 65 61 70 | ....d.?.yA........RtlCompactHeap |
| 32360 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 32380 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 | 492991..............0.......47.. |
| 323a0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 e0 01 04 00 52 74 6c 43 | ......`.......d.?.yA........RtlC |
| 323c0 | 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ompareMemory.ntdll.dll..ntdll.dl |
| 323e0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 32400 | 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......52........`.......d.?.yA |
| 32420 | 20 00 00 00 e1 01 04 00 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 55 6c 6f 6e 67 00 6e 74 | ........RtlCompareMemoryUlong.nt |
| 32440 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 32460 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 | 91..............0.......47...... |
| 32480 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 e2 01 04 00 52 74 6c 43 6f 6d 70 61 | ..`.......d.?.yA........RtlCompa |
| 324a0 | 72 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | reString.ntdll.dll..ntdll.dll/.. |
| 324c0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 324e0 | 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 | ....54........`.......d.?.yA"... |
| 32500 | e3 01 04 00 52 74 6c 43 6f 6d 70 61 72 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c | ....RtlCompareUnicodeString.ntdl |
| 32520 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 32540 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 | ..............0.......48........ |
| 32560 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 e4 01 04 00 52 74 6c 43 6f 6d 70 72 65 73 | `.......d.?.yA........RtlCompres |
| 32580 | 73 42 75 66 66 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | sBuffer.ntdll.dll.ntdll.dll/.... |
| 325a0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 325c0 | 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 e5 01 | ..46........`.......d.?.yA...... |
| 325e0 | 04 00 52 74 6c 43 6f 6d 70 75 74 65 43 72 63 33 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ..RtlComputeCrc32.ntdll.dll.ntdl |
| 32600 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 32620 | 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......56........`.......d. |
| 32640 | 3f ac 79 41 24 00 00 00 e6 01 04 00 52 74 6c 43 6f 6d 70 75 74 65 49 6d 70 6f 72 74 54 61 62 6c | ?.yA$.......RtlComputeImportTabl |
| 32660 | 65 48 61 73 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eHash.ntdll.dll.ntdll.dll/...... |
| 32680 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 326a0 | 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 e7 01 04 00 | 60........`.......d.?.yA(....... |
| 326c0 | 52 74 6c 43 6f 6d 70 75 74 65 50 72 69 76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d 65 5f 55 00 6e 74 | RtlComputePrivatizedDllName_U.nt |
| 326e0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 32700 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 | 91..............0.......60...... |
| 32720 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 e8 01 04 00 52 74 6c 43 6f 6e 73 6f | ..`.......d.?.yA(.......RtlConso |
| 32740 | 6c 65 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | leMultiByteToUnicodeN.ntdll.dll. |
| 32760 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 32780 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......58........`..... |
| 327a0 | 00 00 64 86 3f ac 79 41 26 00 00 00 e9 01 04 00 52 74 6c 43 6f 6e 76 65 72 74 45 78 63 6c 75 73 | ..d.?.yA&.......RtlConvertExclus |
| 327c0 | 69 76 65 54 6f 53 68 61 72 65 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | iveToShared.ntdll.dll.ntdll.dll/ |
| 327e0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 32800 | 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 | ......58........`.......d.?.yA&. |
| 32820 | 00 00 eb 01 04 00 52 74 6c 43 6f 6e 76 65 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c 75 73 69 76 | ......RtlConvertSharedToExclusiv |
| 32840 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 32860 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 | 492991..............0.......59.. |
| 32880 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 ec 01 04 00 52 74 6c 43 | ......`.......d.?.yA'.......RtlC |
| 328a0 | 6f 6e 76 65 72 74 53 69 64 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 | onvertSidToUnicodeString.ntdll.d |
| 328c0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 328e0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 38 20 20 20 20 20 20 20 20 60 0a | ............0.......68........`. |
| 32900 | 00 00 ff ff 00 00 64 86 3f ac 79 41 30 00 00 00 ed 01 04 00 52 74 6c 43 6f 6e 76 65 72 74 54 6f | ......d.?.yA0.......RtlConvertTo |
| 32920 | 41 75 74 6f 49 6e 68 65 72 69 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e | AutoInheritSecurityObject.ntdll. |
| 32940 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 32960 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a | ............0.......56........`. |
| 32980 | 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 ee 01 04 00 52 74 6c 43 6f 6e 76 65 72 74 55 69 | ......d.?.yA$.......RtlConvertUi |
| 329a0 | 4c 69 73 74 54 6f 41 70 69 4c 69 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ListToApiList.ntdll.dll.ntdll.dl |
| 329c0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 329e0 | 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......42........`.......d.?.yA |
| 32a00 | 16 00 00 00 f0 01 04 00 52 74 6c 43 6f 70 79 4c 75 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ........RtlCopyLuid.ntdll.dll.nt |
| 32a20 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 32a40 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......60........`....... |
| 32a60 | 64 86 3f ac 79 41 28 00 00 00 f1 01 04 00 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e 64 41 74 74 72 | d.?.yA(.......RtlCopyLuidAndAttr |
| 32a80 | 69 62 75 74 65 73 41 72 72 61 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ibutesArray.ntdll.dll.ntdll.dll/ |
| 32aa0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 32ac0 | 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 | ......50........`.......d.?.yA.. |
| 32ae0 | 00 00 f2 01 04 00 52 74 6c 43 6f 70 79 4d 61 70 70 65 64 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e | ......RtlCopyMappedMemory.ntdll. |
| 32b00 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 32b20 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a | ............0.......44........`. |
| 32b40 | 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 f3 01 04 00 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 | ......d.?.yA........RtlCopyMemor |
| 32b60 | 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | y.ntdll.dll.ntdll.dll/......1098 |
| 32b80 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 | 492991..............0.......55.. |
| 32ba0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 f4 01 04 00 52 74 6c 43 | ......`.......d.?.yA#.......RtlC |
| 32bc0 | 6f 70 79 4d 65 6d 6f 72 79 4e 6f 6e 54 65 6d 70 6f 72 61 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | opyMemoryNonTemporal.ntdll.dll.. |
| 32be0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 32c00 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 32c20 | 00 00 64 86 3f ac 79 41 20 00 00 00 f5 01 04 00 52 74 6c 43 6f 70 79 4d 65 6d 6f 72 79 53 74 72 | ..d.?.yA........RtlCopyMemoryStr |
| 32c40 | 65 61 6d 54 6f 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eamTo.ntdll.dll.ntdll.dll/...... |
| 32c60 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 32c80 | 36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2c 00 00 00 f6 01 04 00 | 64........`.......d.?.yA,....... |
| 32ca0 | 52 74 6c 43 6f 70 79 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 | RtlCopyOutOfProcessMemoryStreamT |
| 32cc0 | 6f 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | o.ntdll.dll.ntdll.dll/......1098 |
| 32ce0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 | 492991..............0.......56.. |
| 32d00 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 f7 01 04 00 52 74 6c 43 | ......`.......d.?.yA$.......RtlC |
| 32d20 | 6f 70 79 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | opySecurityDescriptor.ntdll.dll. |
| 32d40 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 32d60 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......41........`..... |
| 32d80 | 00 00 64 86 3f ac 79 41 15 00 00 00 f8 01 04 00 52 74 6c 43 6f 70 79 53 69 64 00 6e 74 64 6c 6c | ..d.?.yA........RtlCopySid.ntdll |
| 32da0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 32dc0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 | ..............0.......59........ |
| 32de0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 f9 01 04 00 52 74 6c 43 6f 70 79 53 69 64 | `.......d.?.yA'.......RtlCopySid |
| 32e00 | 41 6e 64 41 74 74 72 69 62 75 74 65 73 41 72 72 61 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | AndAttributesArray.ntdll.dll..nt |
| 32e20 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 32e40 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......44........`....... |
| 32e60 | 64 86 3f ac 79 41 18 00 00 00 fa 01 04 00 52 74 6c 43 6f 70 79 53 74 72 69 6e 67 00 6e 74 64 6c | d.?.yA........RtlCopyString.ntdl |
| 32e80 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 32ea0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 | ..............0.......51........ |
| 32ec0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 fb 01 04 00 52 74 6c 43 6f 70 79 55 6e 69 | `.......d.?.yA........RtlCopyUni |
| 32ee0 | 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | codeString.ntdll.dll..ntdll.dll/ |
| 32f00 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 32f20 | 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 | ......43........`.......d.?.yA.. |
| 32f40 | 00 00 fc 01 04 00 52 74 6c 43 72 65 61 74 65 41 63 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ......RtlCreateAcl.ntdll.dll..nt |
| 32f60 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 32f80 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......57........`....... |
| 32fa0 | 64 86 3f ac 79 41 25 00 00 00 fd 01 04 00 52 74 6c 43 72 65 61 74 65 41 63 74 69 76 61 74 69 6f | d.?.yA%.......RtlCreateActivatio |
| 32fc0 | 6e 43 6f 6e 74 65 78 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | nContext.ntdll.dll..ntdll.dll/.. |
| 32fe0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 33000 | 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 | ....48........`.......d.?.yA.... |
| 33020 | fe 01 04 00 52 74 6c 43 72 65 61 74 65 41 6e 64 53 65 74 53 44 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ....RtlCreateAndSetSD.ntdll.dll. |
| 33040 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 33060 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 33080 | 00 00 64 86 3f ac 79 41 1d 00 00 00 ff 01 04 00 52 74 6c 43 72 65 61 74 65 41 74 6f 6d 54 61 62 | ..d.?.yA........RtlCreateAtomTab |
| 330a0 | 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | le.ntdll.dll..ntdll.dll/......10 |
| 330c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 | 98492991..............0.......58 |
| 330e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 00 02 04 00 52 74 | ........`.......d.?.yA&.......Rt |
| 33100 | 6c 43 72 65 61 74 65 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 46 69 6c 65 00 6e 74 64 6c 6c 2e | lCreateBootStatusDataFile.ntdll. |
| 33120 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 33140 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a | ............0.......51........`. |
| 33160 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 01 02 04 00 52 74 6c 43 72 65 61 74 65 45 6e 76 | ......d.?.yA........RtlCreateEnv |
| 33180 | 69 72 6f 6e 6d 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ironment.ntdll.dll..ntdll.dll/.. |
| 331a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 331c0 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 331e0 | 02 02 04 00 52 74 6c 43 72 65 61 74 65 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....RtlCreateHeap.ntdll.dll.ntdl |
| 33200 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 33220 | 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......57........`.......d. |
| 33240 | 3f ac 79 41 25 00 00 00 03 02 04 00 52 74 6c 43 72 65 61 74 65 50 72 6f 63 65 73 73 50 61 72 61 | ?.yA%.......RtlCreateProcessPara |
| 33260 | 6d 65 74 65 72 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | meters.ntdll.dll..ntdll.dll/.... |
| 33280 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 332a0 | 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 04 02 | ..56........`.......d.?.yA$..... |
| 332c0 | 04 00 52 74 6c 43 72 65 61 74 65 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 6e 74 64 6c | ..RtlCreateQueryDebugBuffer.ntdl |
| 332e0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 33300 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 | ..............0.......51........ |
| 33320 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 05 02 04 00 52 74 6c 43 72 65 61 74 65 52 | `.......d.?.yA........RtlCreateR |
| 33340 | 65 67 69 73 74 72 79 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | egistryKey.ntdll.dll..ntdll.dll/ |
| 33360 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 33380 | 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 | ......58........`.......d.?.yA&. |
| 333a0 | 00 00 06 02 04 00 52 74 6c 43 72 65 61 74 65 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f | ......RtlCreateSecurityDescripto |
| 333c0 | 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | r.ntdll.dll.ntdll.dll/......1098 |
| 333e0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 39 20 20 | 492991..............0.......69.. |
| 33400 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 31 00 00 00 07 02 04 00 52 74 6c 43 | ......`.......d.?.yA1.......RtlC |
| 33420 | 72 65 61 74 65 53 79 73 74 65 6d 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 6f 6c 64 | reateSystemVolumeInformationFold |
| 33440 | 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | er.ntdll.dll..ntdll.dll/......10 |
| 33460 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 | 98492991..............0.......47 |
| 33480 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 08 02 04 00 52 74 | ........`.......d.?.yA........Rt |
| 334a0 | 6c 43 72 65 61 74 65 54 61 67 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | lCreateTagHeap.ntdll.dll..ntdll. |
| 334c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 334e0 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 33500 | 79 41 19 00 00 00 09 02 04 00 52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 | yA........RtlCreateTimer.ntdll.d |
| 33520 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 33540 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a | ............0.......50........`. |
| 33560 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 0a 02 04 00 52 74 6c 43 72 65 61 74 65 54 69 6d | ......d.?.yA........RtlCreateTim |
| 33580 | 65 72 51 75 65 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | erQueue.ntdll.dll.ntdll.dll/.... |
| 335a0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 335c0 | 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 0b 02 | ..53........`.......d.?.yA!..... |
| 335e0 | 04 00 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 | ..RtlCreateUnicodeString.ntdll.d |
| 33600 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 33620 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a | ............0.......63........`. |
| 33640 | 00 00 ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 0c 02 04 00 52 74 6c 43 72 65 61 74 65 55 6e 69 | ......d.?.yA+.......RtlCreateUni |
| 33660 | 63 6f 64 65 53 74 72 69 6e 67 46 72 6f 6d 41 73 63 69 69 7a 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | codeStringFromAsciiz.ntdll.dll.. |
| 33680 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 336a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 336c0 | 00 00 64 86 3f ac 79 41 1f 00 00 00 0d 02 04 00 52 74 6c 43 72 65 61 74 65 55 73 65 72 50 72 6f | ..d.?.yA........RtlCreateUserPro |
| 336e0 | 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | cess.ntdll.dll..ntdll.dll/...... |
| 33700 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 33720 | 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 0e 02 04 00 | 58........`.......d.?.yA&....... |
| 33740 | 52 74 6c 43 72 65 61 74 65 55 73 65 72 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c | RtlCreateUserSecurityObject.ntdl |
| 33760 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 33780 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 | ..............0.......50........ |
| 337a0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 0f 02 04 00 52 74 6c 43 72 65 61 74 65 55 | `.......d.?.yA........RtlCreateU |
| 337c0 | 73 65 72 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | serThread.ntdll.dll.ntdll.dll/.. |
| 337e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 33800 | 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 | ....52........`.......d.?.yA.... |
| 33820 | 10 02 04 00 52 74 6c 43 75 73 74 6f 6d 43 50 54 6f 55 6e 69 63 6f 64 65 4e 00 6e 74 64 6c 6c 2e | ....RtlCustomCPToUnicodeN.ntdll. |
| 33840 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 33860 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a | ............0.......57........`. |
| 33880 | 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 11 02 04 00 52 74 6c 43 75 74 6f 76 65 72 54 69 | ......d.?.yA%.......RtlCutoverTi |
| 338a0 | 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | meToSystemTime.ntdll.dll..ntdll. |
| 338c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 338e0 | 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......58........`.......d.?. |
| 33900 | 79 41 26 00 00 00 12 02 04 00 52 74 6c 44 65 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 | yA&.......RtlDeNormalizeProcessP |
| 33920 | 61 72 61 6d 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | arams.ntdll.dll.ntdll.dll/...... |
| 33940 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 33960 | 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 13 02 04 00 | 61........`.......d.?.yA)....... |
| 33980 | 52 74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 6e | RtlDeactivateActivationContext.n |
| 339a0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 339c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 31 20 20 20 20 | 2991..............0.......71.... |
| 339e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 33 00 00 00 14 02 04 00 52 74 6c 44 65 61 | ....`.......d.?.yA3.......RtlDea |
| 33a00 | 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 | ctivateActivationContextUnsafeFa |
| 33a20 | 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | st.ntdll.dll..ntdll.dll/......10 |
| 33a40 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 | 98492991..............0.......49 |
| 33a60 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 15 02 04 00 52 74 | ........`.......d.?.yA........Rt |
| 33a80 | 6c 44 65 62 75 67 50 72 69 6e 74 54 69 6d 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | lDebugPrintTimes.ntdll.dll..ntdl |
| 33aa0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 33ac0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 33ae0 | 3f ac 79 41 1b 00 00 00 16 02 04 00 52 74 6c 44 65 63 6f 64 65 50 6f 69 6e 74 65 72 00 6e 74 64 | ?.yA........RtlDecodePointer.ntd |
| 33b00 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 33b20 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 33b40 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 17 02 04 00 52 74 6c 44 65 63 6f 64 | ..`.......d.?.yA!.......RtlDecod |
| 33b60 | 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | eSystemPointer.ntdll.dll..ntdll. |
| 33b80 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 33ba0 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 33bc0 | 79 41 1e 00 00 00 18 02 04 00 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 42 75 66 66 65 72 00 6e 74 | yA........RtlDecompressBuffer.nt |
| 33be0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 33c00 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 | 91..............0.......52...... |
| 33c20 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 19 02 04 00 52 74 6c 44 65 63 6f 6d | ..`.......d.?.yA........RtlDecom |
| 33c40 | 70 72 65 73 73 46 72 61 67 6d 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | pressFragment.ntdll.dll.ntdll.dl |
| 33c60 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 33c80 | 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......46........`.......d.?.yA |
| 33ca0 | 1a 00 00 00 1a 02 04 00 52 74 6c 44 65 66 61 75 6c 74 4e 70 41 63 6c 00 6e 74 64 6c 6c 2e 64 6c | ........RtlDefaultNpAcl.ntdll.dl |
| 33cc0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 33ce0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......40........`... |
| 33d00 | ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 1b 02 04 00 52 74 6c 44 65 6c 65 74 65 00 6e 74 64 6c | ....d.?.yA........RtlDelete.ntdl |
| 33d20 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 33d40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 | ..............0.......43........ |
| 33d60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 1c 02 04 00 52 74 6c 44 65 6c 65 74 65 41 | `.......d.?.yA........RtlDeleteA |
| 33d80 | 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ce.ntdll.dll..ntdll.dll/......10 |
| 33da0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 | 98492991..............0.......57 |
| 33dc0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 1d 02 04 00 52 74 | ........`.......d.?.yA%.......Rt |
| 33de0 | 6c 44 65 6c 65 74 65 41 74 6f 6d 46 72 6f 6d 41 74 6f 6d 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 | lDeleteAtomFromAtomTable.ntdll.d |
| 33e00 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 33e20 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a | ............0.......55........`. |
| 33e40 | 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 1e 02 04 00 52 74 6c 44 65 6c 65 74 65 43 72 69 | ......d.?.yA#.......RtlDeleteCri |
| 33e60 | 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ticalSection.ntdll.dll..ntdll.dl |
| 33e80 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 33ea0 | 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......59........`.......d.?.yA |
| 33ec0 | 27 00 00 00 1f 02 04 00 52 74 6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 | '.......RtlDeleteElementGenericT |
| 33ee0 | 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | able.ntdll.dll..ntdll.dll/...... |
| 33f00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 33f20 | 36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2a 00 00 00 20 02 04 00 | 62........`.......d.?.yA*....... |
| 33f40 | 52 74 6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 | RtlDeleteElementGenericTableAvl. |
| 33f60 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 33f80 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 | 2991..............0.......53.... |
| 33fa0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 21 02 04 00 52 74 6c 44 65 6c | ....`.......d.?.yA!...!...RtlDel |
| 33fc0 | 65 74 65 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | eteFunctionTable.ntdll.dll..ntdl |
| 33fe0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 34000 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 34020 | 3f ac 79 41 1b 00 00 00 22 02 04 00 52 74 6c 44 65 6c 65 74 65 4e 6f 53 70 6c 61 79 00 6e 74 64 | ?.yA...."...RtlDeleteNoSplay.ntd |
| 34040 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 34060 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 34080 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 23 02 04 00 52 74 6c 44 65 6c 65 74 | ..`.......d.?.yA!...#...RtlDelet |
| 340a0 | 65 52 65 67 69 73 74 72 79 56 61 6c 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | eRegistryValue.ntdll.dll..ntdll. |
| 340c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 340e0 | 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......48........`.......d.?. |
| 34100 | 79 41 1c 00 00 00 24 02 04 00 52 74 6c 44 65 6c 65 74 65 52 65 73 6f 75 72 63 65 00 6e 74 64 6c | yA....$...RtlDeleteResource.ntdl |
| 34120 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 34140 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 | ..............0.......54........ |
| 34160 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 25 02 04 00 52 74 6c 44 65 6c 65 74 65 53 | `.......d.?.yA"...%...RtlDeleteS |
| 34180 | 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ecurityObject.ntdll.dll.ntdll.dl |
| 341a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 341c0 | 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......45........`.......d.?.yA |
| 341e0 | 19 00 00 00 26 02 04 00 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c | ....&...RtlDeleteTimer.ntdll.dll |
| 34200 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 34220 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......50........`... |
| 34240 | ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 27 02 04 00 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 | ....d.?.yA....'...RtlDeleteTimer |
| 34260 | 51 75 65 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Queue.ntdll.dll.ntdll.dll/...... |
| 34280 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 342a0 | 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 28 02 04 00 | 52........`.......d.?.yA....(... |
| 342c0 | 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75 65 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | RtlDeleteTimerQueueEx.ntdll.dll. |
| 342e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 34300 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......48........`..... |
| 34320 | 00 00 64 86 3f ac 79 41 1c 00 00 00 29 02 04 00 52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 | ..d.?.yA....)...RtlDeregisterWai |
| 34340 | 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | t.ntdll.dll.ntdll.dll/......1098 |
| 34360 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 34380 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 2a 02 04 00 52 74 6c 44 | ......`.......d.?.yA....*...RtlD |
| 343a0 | 65 72 65 67 69 73 74 65 72 57 61 69 74 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | eregisterWaitEx.ntdll.dll.ntdll. |
| 343c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 343e0 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 34400 | 79 41 1e 00 00 00 2b 02 04 00 52 74 6c 44 65 73 74 72 6f 79 41 74 6f 6d 54 61 62 6c 65 00 6e 74 | yA....+...RtlDestroyAtomTable.nt |
| 34420 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 34440 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 | 91..............0.......52...... |
| 34460 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 2c 02 04 00 52 74 6c 44 65 73 74 72 | ..`.......d.?.yA....,...RtlDestr |
| 34480 | 6f 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | oyEnvironment.ntdll.dll.ntdll.dl |
| 344a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 344c0 | 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......52........`.......d.?.yA |
| 344e0 | 20 00 00 00 2d 02 04 00 52 74 6c 44 65 73 74 72 6f 79 48 61 6e 64 6c 65 54 61 62 6c 65 00 6e 74 | ....-...RtlDestroyHandleTable.nt |
| 34500 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 34520 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 | 91..............0.......45...... |
| 34540 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 2e 02 04 00 52 74 6c 44 65 73 74 72 | ..`.......d.?.yA........RtlDestr |
| 34560 | 6f 79 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | oyHeap.ntdll.dll..ntdll.dll/.... |
| 34580 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 345a0 | 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 2f 02 | ..58........`.......d.?.yA&.../. |
| 345c0 | 04 00 52 74 6c 44 65 73 74 72 6f 79 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 00 6e 74 | ..RtlDestroyProcessParameters.nt |
| 345e0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 34600 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 | 91..............0.......57...... |
| 34620 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 30 02 04 00 52 74 6c 44 65 73 74 72 | ..`.......d.?.yA%...0...RtlDestr |
| 34640 | 6f 79 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | oyQueryDebugBuffer.ntdll.dll..nt |
| 34660 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 34680 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......60........`....... |
| 346a0 | 64 86 3f ac 79 41 28 00 00 00 31 02 04 00 52 74 6c 44 65 74 65 72 6d 69 6e 65 44 6f 73 50 61 74 | d.?.yA(...1...RtlDetermineDosPat |
| 346c0 | 68 4e 61 6d 65 54 79 70 65 5f 55 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | hNameType_U.ntdll.dll.ntdll.dll/ |
| 346e0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 34700 | 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 | ......55........`.......d.?.yA#. |
| 34720 | 00 00 32 02 04 00 52 74 6c 44 6c 6c 53 68 75 74 64 6f 77 6e 49 6e 50 72 6f 67 72 65 73 73 00 6e | ..2...RtlDllShutdownInProgress.n |
| 34740 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 34760 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 | 2991..............0.......59.... |
| 34780 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 33 02 04 00 52 74 6c 44 6e 73 | ....`.......d.?.yA'...3...RtlDns |
| 347a0 | 48 6f 73 74 4e 61 6d 65 54 6f 43 6f 6d 70 75 74 65 72 4e 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c | HostNameToComputerName.ntdll.dll |
| 347c0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 347e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......50........`... |
| 34800 | ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 34 02 04 00 52 74 6c 44 6f 65 73 46 69 6c 65 45 78 69 | ....d.?.yA....4...RtlDoesFileExi |
| 34820 | 73 74 73 5f 55 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | sts_U.ntdll.dll.ntdll.dll/...... |
| 34840 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 34860 | 37 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 33 00 00 00 35 02 04 00 | 71........`.......d.?.yA3...5... |
| 34880 | 52 74 6c 44 6f 73 41 70 70 6c 79 46 69 6c 65 49 73 6f 6c 61 74 69 6f 6e 52 65 64 69 72 65 63 74 | RtlDosApplyFileIsolationRedirect |
| 348a0 | 69 6f 6e 5f 55 73 74 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ion_Ustr.ntdll.dll..ntdll.dll/.. |
| 348c0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 348e0 | 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 | ....59........`.......d.?.yA'... |
| 34900 | 36 02 04 00 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 | 6...RtlDosPathNameToNtPathName_U |
| 34920 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 34940 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 30 20 20 | 492991..............0.......70.. |
| 34960 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 32 00 00 00 37 02 04 00 52 74 6c 44 | ......`.......d.?.yA2...7...RtlD |
| 34980 | 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 74 61 | osPathNameToNtPathName_U_WithSta |
| 349a0 | 74 75 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | tus.ntdll.dll.ntdll.dll/......10 |
| 349c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 37 | 98492991..............0.......67 |
| 349e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2f 00 00 00 38 02 04 00 52 74 | ........`.......d.?.yA/...8...Rt |
| 34a00 | 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 | lDosPathNameToRelativeNtPathName |
| 34a20 | 5f 55 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | _U.ntdll.dll..ntdll.dll/......10 |
| 34a40 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 38 | 98492991..............0.......78 |
| 34a60 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 3a 00 00 00 39 02 04 00 52 74 | ........`.......d.?.yA:...9...Rt |
| 34a80 | 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 | lDosPathNameToRelativeNtPathName |
| 34aa0 | 5f 55 5f 57 69 74 68 53 74 61 74 75 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | _U_WithStatus.ntdll.dll.ntdll.dl |
| 34ac0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 34ae0 | 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......49........`.......d.?.yA |
| 34b00 | 1d 00 00 00 3a 02 04 00 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 00 6e 74 64 6c 6c | ....:...RtlDosSearchPath_U.ntdll |
| 34b20 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 34b40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 | ..............0.......52........ |
| 34b60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 3b 02 04 00 52 74 6c 44 6f 73 53 65 61 72 | `.......d.?.yA....;...RtlDosSear |
| 34b80 | 63 68 50 61 74 68 5f 55 73 74 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | chPath_Ustr.ntdll.dll.ntdll.dll/ |
| 34ba0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 34bc0 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 34be0 | 00 00 3c 02 04 00 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61 72 00 6e 74 64 | ..<...RtlDowncaseUnicodeChar.ntd |
| 34c00 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 34c20 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 | 91..............0.......55...... |
| 34c40 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 3d 02 04 00 52 74 6c 44 6f 77 6e 63 | ..`.......d.?.yA#...=...RtlDownc |
| 34c60 | 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | aseUnicodeString.ntdll.dll..ntdl |
| 34c80 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 34ca0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......46........`.......d. |
| 34cc0 | 3f ac 79 41 1a 00 00 00 3e 02 04 00 52 74 6c 44 75 6d 70 52 65 73 6f 75 72 63 65 00 6e 74 64 6c | ?.yA....>...RtlDumpResource.ntdl |
| 34ce0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 34d00 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 | ..............0.......56........ |
| 34d20 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 3f 02 04 00 52 74 6c 44 75 70 6c 69 63 61 | `.......d.?.yA$...?...RtlDuplica |
| 34d40 | 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | teUnicodeString.ntdll.dll.ntdll. |
| 34d60 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 34d80 | 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......48........`.......d.?. |
| 34da0 | 79 41 1c 00 00 00 40 02 04 00 52 74 6c 45 6d 70 74 79 41 74 6f 6d 54 61 62 6c 65 00 6e 74 64 6c | yA....@...RtlEmptyAtomTable.ntdl |
| 34dc0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 34de0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 33 20 20 20 20 20 20 20 20 | ..............0.......73........ |
| 34e00 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 35 00 00 00 41 02 04 00 52 74 6c 45 6e 61 62 6c 65 45 | `.......d.?.yA5...A...RtlEnableE |
| 34e20 | 61 72 6c 79 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 45 76 65 6e 74 43 72 65 61 74 69 6f 6e | arlyCriticalSectionEventCreation |
| 34e40 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 34e60 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 | 492991..............0.......47.. |
| 34e80 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 42 02 04 00 52 74 6c 45 | ......`.......d.?.yA....B...RtlE |
| 34ea0 | 6e 63 6f 64 65 50 6f 69 6e 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ncodePointer.ntdll.dll..ntdll.dl |
| 34ec0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 34ee0 | 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......53........`.......d.?.yA |
| 34f00 | 21 00 00 00 43 02 04 00 52 74 6c 45 6e 63 6f 64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 00 6e | !...C...RtlEncodeSystemPointer.n |
| 34f20 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 34f40 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 | 2991..............0.......54.... |
| 34f60 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 44 02 04 00 52 74 6c 45 6e 74 | ....`.......d.?.yA"...D...RtlEnt |
| 34f80 | 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | erCriticalSection.ntdll.dll.ntdl |
| 34fa0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 34fc0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......50........`.......d. |
| 34fe0 | 3f ac 79 41 1e 00 00 00 45 02 04 00 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73 73 48 65 61 70 73 00 | ?.yA....E...RtlEnumProcessHeaps. |
| 35000 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 35020 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 | 2991..............0.......55.... |
| 35040 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 46 02 04 00 52 74 6c 45 6e 75 | ....`.......d.?.yA#...F...RtlEnu |
| 35060 | 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | merateGenericTable.ntdll.dll..nt |
| 35080 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 350a0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......58........`....... |
| 350c0 | 64 86 3f ac 79 41 26 00 00 00 47 02 04 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 | d.?.yA&...G...RtlEnumerateGeneri |
| 350e0 | 63 54 61 62 6c 65 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | cTableAvl.ntdll.dll.ntdll.dll/.. |
| 35100 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 35120 | 20 20 20 20 36 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 31 00 00 00 | ....69........`.......d.?.yA1... |
| 35140 | 48 02 04 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 4c 69 6b 65 | H...RtlEnumerateGenericTableLike |
| 35160 | 41 44 69 72 65 63 74 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ADirectory.ntdll.dll..ntdll.dll/ |
| 35180 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 351a0 | 20 20 20 20 20 20 37 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 32 00 | ......70........`.......d.?.yA2. |
| 351c0 | 00 00 49 02 04 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 | ..I...RtlEnumerateGenericTableWi |
| 351e0 | 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | thoutSplaying.ntdll.dll.ntdll.dl |
| 35200 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 35220 | 30 20 20 20 20 20 20 20 37 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......73........`.......d.?.yA |
| 35240 | 35 00 00 00 4a 02 04 00 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 | 5...J...RtlEnumerateGenericTable |
| 35260 | 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | WithoutSplayingAvl.ntdll.dll..nt |
| 35280 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 352a0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 352c0 | 64 86 3f ac 79 41 1f 00 00 00 4b 02 04 00 52 74 6c 45 71 75 61 6c 43 6f 6d 70 75 74 65 72 4e 61 | d.?.yA....K...RtlEqualComputerNa |
| 352e0 | 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | me.ntdll.dll..ntdll.dll/......10 |
| 35300 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 | 98492991..............0.......49 |
| 35320 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 4c 02 04 00 52 74 | ........`.......d.?.yA....L...Rt |
| 35340 | 6c 45 71 75 61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | lEqualDomainName.ntdll.dll..ntdl |
| 35360 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 35380 | 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......43........`.......d. |
| 353a0 | 3f ac 79 41 17 00 00 00 4d 02 04 00 52 74 6c 45 71 75 61 6c 4c 75 69 64 00 6e 74 64 6c 6c 2e 64 | ?.yA....M...RtlEqualLuid.ntdll.d |
| 353c0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 353e0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a | ............0.......48........`. |
| 35400 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 4e 02 04 00 52 74 6c 45 71 75 61 6c 50 72 65 66 | ......d.?.yA....N...RtlEqualPref |
| 35420 | 69 78 53 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ixSid.ntdll.dll.ntdll.dll/...... |
| 35440 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 35460 | 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 4f 02 04 00 | 42........`.......d.?.yA....O... |
| 35480 | 52 74 6c 45 71 75 61 6c 53 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | RtlEqualSid.ntdll.dll.ntdll.dll/ |
| 354a0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 354c0 | 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 | ......45........`.......d.?.yA.. |
| 354e0 | 00 00 50 02 04 00 52 74 6c 45 71 75 61 6c 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ..P...RtlEqualString.ntdll.dll.. |
| 35500 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 35520 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 35540 | 00 00 64 86 3f ac 79 41 20 00 00 00 51 02 04 00 52 74 6c 45 71 75 61 6c 55 6e 69 63 6f 64 65 53 | ..d.?.yA....Q...RtlEqualUnicodeS |
| 35560 | 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tring.ntdll.dll.ntdll.dll/...... |
| 35580 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 355a0 | 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 52 02 04 00 | 52........`.......d.?.yA....R... |
| 355c0 | 52 74 6c 45 72 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | RtlEraseUnicodeString.ntdll.dll. |
| 355e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 35600 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......48........`..... |
| 35620 | 00 00 64 86 3f ac 79 41 1c 00 00 00 53 02 04 00 52 74 6c 45 78 69 74 55 73 65 72 54 68 72 65 61 | ..d.?.yA....S...RtlExitUserThrea |
| 35640 | 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | d.ntdll.dll.ntdll.dll/......1098 |
| 35660 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 | 492991..............0.......60.. |
| 35680 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 54 02 04 00 52 74 6c 45 | ......`.......d.?.yA(...T...RtlE |
| 356a0 | 78 70 61 6e 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 73 5f 55 00 6e 74 64 6c 6c 2e | xpandEnvironmentStrings_U.ntdll. |
| 356c0 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 356e0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a | ............0.......44........`. |
| 35700 | 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 55 02 04 00 52 74 6c 45 78 74 65 6e 64 48 65 61 | ......d.?.yA....U...RtlExtendHea |
| 35720 | 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | p.ntdll.dll.ntdll.dll/......1098 |
| 35740 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 | 492991..............0.......44.. |
| 35760 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 56 02 04 00 52 74 6c 46 | ......`.......d.?.yA....V...RtlF |
| 35780 | 69 6c 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | illMemory.ntdll.dll.ntdll.dll/.. |
| 357a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 357c0 | 20 20 20 20 37 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 32 00 00 00 | ....70........`.......d.?.yA2... |
| 357e0 | 57 02 04 00 52 74 6c 46 69 6e 61 6c 52 65 6c 65 61 73 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d | W...RtlFinalReleaseOutOfProcessM |
| 35800 | 65 6d 6f 72 79 53 74 72 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | emoryStream.ntdll.dll.ntdll.dll/ |
| 35820 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 35840 | 20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2e 00 | ......66........`.......d.?.yA.. |
| 35860 | 00 00 58 02 04 00 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 | ..X...RtlFindActivationContextSe |
| 35880 | 63 74 69 6f 6e 47 75 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ctionGuid.ntdll.dll.ntdll.dll/.. |
| 358a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 358c0 | 20 20 20 20 36 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 30 00 00 00 | ....68........`.......d.?.yA0... |
| 358e0 | 59 02 04 00 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 | Y...RtlFindActivationContextSect |
| 35900 | 69 6f 6e 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ionString.ntdll.dll.ntdll.dll/.. |
| 35920 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 35940 | 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 | ....57........`.......d.?.yA%... |
| 35960 | 5a 02 04 00 52 74 6c 46 69 6e 64 43 68 61 72 49 6e 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e | Z...RtlFindCharInUnicodeString.n |
| 35980 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 359a0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 | 2991..............0.......47.... |
| 359c0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 5b 02 04 00 52 74 6c 46 69 6e | ....`.......d.?.yA....[...RtlFin |
| 359e0 | 64 43 6c 65 61 72 42 69 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | dClearBits.ntdll.dll..ntdll.dll/ |
| 35a00 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 35a20 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 35a40 | 00 00 5c 02 04 00 52 74 6c 46 69 6e 64 43 6c 65 61 72 42 69 74 73 41 6e 64 53 65 74 00 6e 74 64 | ..\...RtlFindClearBitsAndSet.ntd |
| 35a60 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 35a80 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 | 91..............0.......47...... |
| 35aa0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 5d 02 04 00 52 74 6c 46 69 6e 64 43 | ..`.......d.?.yA....]...RtlFindC |
| 35ac0 | 6c 65 61 72 52 75 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | learRuns.ntdll.dll..ntdll.dll/.. |
| 35ae0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 35b00 | 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 | ....58........`.......d.?.yA&... |
| 35b20 | 5e 02 04 00 52 74 6c 46 69 6e 64 4c 61 73 74 42 61 63 6b 77 61 72 64 52 75 6e 43 6c 65 61 72 00 | ^...RtlFindLastBackwardRunClear. |
| 35b40 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 35b60 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 | 2991..............0.......57.... |
| 35b80 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 5f 02 04 00 52 74 6c 46 69 6e | ....`.......d.?.yA%..._...RtlFin |
| 35ba0 | 64 4c 65 61 73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | dLeastSignificantBit.ntdll.dll.. |
| 35bc0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 35be0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......53........`..... |
| 35c00 | 00 00 64 86 3f ac 79 41 21 00 00 00 60 02 04 00 52 74 6c 46 69 6e 64 4c 6f 6e 67 65 73 74 52 75 | ..d.?.yA!...`...RtlFindLongestRu |
| 35c20 | 6e 43 6c 65 61 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | nClear.ntdll.dll..ntdll.dll/.... |
| 35c40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 35c60 | 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 61 02 | ..45........`.......d.?.yA....a. |
| 35c80 | 04 00 52 74 6c 46 69 6e 64 4d 65 73 73 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ..RtlFindMessage.ntdll.dll..ntdl |
| 35ca0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 35cc0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......56........`.......d. |
| 35ce0 | 3f ac 79 41 24 00 00 00 62 02 04 00 52 74 6c 46 69 6e 64 4d 6f 73 74 53 69 67 6e 69 66 69 63 61 | ?.yA$...b...RtlFindMostSignifica |
| 35d00 | 6e 74 42 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ntBit.ntdll.dll.ntdll.dll/...... |
| 35d20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 35d40 | 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 63 02 04 00 | 57........`.......d.?.yA%...c... |
| 35d60 | 52 74 6c 46 69 6e 64 4e 65 78 74 46 6f 72 77 61 72 64 52 75 6e 43 6c 65 61 72 00 6e 74 64 6c 6c | RtlFindNextForwardRunClear.ntdll |
| 35d80 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 35da0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 | ..............0.......45........ |
| 35dc0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 64 02 04 00 52 74 6c 46 69 6e 64 53 65 74 | `.......d.?.yA....d...RtlFindSet |
| 35de0 | 42 69 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Bits.ntdll.dll..ntdll.dll/...... |
| 35e00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 35e20 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 65 02 04 00 | 53........`.......d.?.yA!...e... |
| 35e40 | 52 74 6c 46 69 6e 64 53 65 74 42 69 74 73 41 6e 64 43 6c 65 61 72 00 6e 74 64 6c 6c 2e 64 6c 6c | RtlFindSetBitsAndClear.ntdll.dll |
| 35e60 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 35e80 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......49........`... |
| 35ea0 | ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 66 02 04 00 52 74 6c 46 69 72 73 74 45 6e 74 72 79 53 | ....d.?.yA....f...RtlFirstEntryS |
| 35ec0 | 4c 69 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | List.ntdll.dll..ntdll.dll/...... |
| 35ee0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 35f00 | 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 67 02 04 00 | 46........`.......d.?.yA....g... |
| 35f20 | 52 74 6c 46 69 72 73 74 46 72 65 65 41 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | RtlFirstFreeAce.ntdll.dll.ntdll. |
| 35f40 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 35f60 | 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......56........`.......d.?. |
| 35f80 | 79 41 24 00 00 00 68 02 04 00 52 74 6c 46 6c 75 73 68 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 | yA$...h...RtlFlushSecureMemoryCa |
| 35fa0 | 63 68 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | che.ntdll.dll.ntdll.dll/......10 |
| 35fc0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 | 98492991..............0.......58 |
| 35fe0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 69 02 04 00 52 74 | ........`.......d.?.yA&...i...Rt |
| 36000 | 6c 46 6f 72 6d 61 74 43 75 72 72 65 6e 74 55 73 65 72 4b 65 79 50 61 74 68 00 6e 74 64 6c 6c 2e | lFormatCurrentUserKeyPath.ntdll. |
| 36020 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 36040 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a | ............0.......47........`. |
| 36060 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 6a 02 04 00 52 74 6c 46 6f 72 6d 61 74 4d 65 73 | ......d.?.yA....j...RtlFormatMes |
| 36080 | 73 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | sage.ntdll.dll..ntdll.dll/...... |
| 360a0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 360c0 | 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 6b 02 04 00 | 49........`.......d.?.yA....k... |
| 360e0 | 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | RtlFormatMessageEx.ntdll.dll..nt |
| 36100 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 36120 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......60........`....... |
| 36140 | 64 86 3f ac 79 41 28 00 00 00 6c 02 04 00 52 74 6c 46 72 65 65 41 63 74 69 76 61 74 69 6f 6e 43 | d.?.yA(...l...RtlFreeActivationC |
| 36160 | 6f 6e 74 65 78 74 53 74 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ontextStack.ntdll.dll.ntdll.dll/ |
| 36180 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 361a0 | 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 | ......48........`.......d.?.yA.. |
| 361c0 | 00 00 6d 02 04 00 52 74 6c 46 72 65 65 41 6e 73 69 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c | ..m...RtlFreeAnsiString.ntdll.dl |
| 361e0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 36200 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......44........`... |
| 36220 | ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 6e 02 04 00 52 74 6c 46 72 65 65 48 61 6e 64 6c 65 00 | ....d.?.yA....n...RtlFreeHandle. |
| 36240 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 36260 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 | 2991..............0.......42.... |
| 36280 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 6f 02 04 00 52 74 6c 46 72 65 | ....`.......d.?.yA....o...RtlFre |
| 362a0 | 65 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eHeap.ntdll.dll.ntdll.dll/...... |
| 362c0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 362e0 | 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 70 02 04 00 | 47........`.......d.?.yA....p... |
| 36300 | 52 74 6c 46 72 65 65 4f 65 6d 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | RtlFreeOemString.ntdll.dll..ntdl |
| 36320 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 36340 | 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......41........`.......d. |
| 36360 | 3f ac 79 41 15 00 00 00 71 02 04 00 52 74 6c 46 72 65 65 53 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c | ?.yA....q...RtlFreeSid.ntdll.dll |
| 36380 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 363a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......66........`... |
| 363c0 | ff ff 00 00 64 86 3f ac 79 41 2e 00 00 00 72 02 04 00 52 74 6c 46 72 65 65 54 68 72 65 61 64 41 | ....d.?.yA....r...RtlFreeThreadA |
| 363e0 | 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ctivationContextStack.ntdll.dll. |
| 36400 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 36420 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 36440 | 00 00 64 86 3f ac 79 41 1f 00 00 00 73 02 04 00 52 74 6c 46 72 65 65 55 6e 69 63 6f 64 65 53 74 | ..d.?.yA....s...RtlFreeUnicodeSt |
| 36460 | 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ring.ntdll.dll..ntdll.dll/...... |
| 36480 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 364a0 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 74 02 04 00 | 53........`.......d.?.yA!...t... |
| 364c0 | 52 74 6c 46 72 65 65 55 73 65 72 54 68 72 65 61 64 53 74 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c | RtlFreeUserThreadStack.ntdll.dll |
| 364e0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 36500 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......48........`... |
| 36520 | ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 75 02 04 00 52 74 6c 47 55 49 44 46 72 6f 6d 53 74 72 | ....d.?.yA....u...RtlGUIDFromStr |
| 36540 | 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ing.ntdll.dll.ntdll.dll/......10 |
| 36560 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 | 98492991..............0.......51 |
| 36580 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 76 02 04 00 52 74 | ........`.......d.?.yA....v...Rt |
| 365a0 | 6c 47 65 6e 65 72 61 74 65 38 64 6f 74 33 4e 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | lGenerate8dot3Name.ntdll.dll..nt |
| 365c0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 365e0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......40........`....... |
| 36600 | 64 86 3f ac 79 41 14 00 00 00 77 02 04 00 52 74 6c 47 65 74 41 63 65 00 6e 74 64 6c 6c 2e 64 6c | d.?.yA....w...RtlGetAce.ntdll.dl |
| 36620 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 36640 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......60........`... |
| 36660 | ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 78 02 04 00 52 74 6c 47 65 74 41 63 74 69 76 65 41 63 | ....d.?.yA(...x...RtlGetActiveAc |
| 36680 | 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | tivationContext.ntdll.dll.ntdll. |
| 366a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 366c0 | 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......51........`.......d.?. |
| 366e0 | 79 41 1f 00 00 00 79 02 04 00 52 74 6c 47 65 74 43 61 6c 6c 65 72 73 41 64 64 72 65 73 73 00 6e | yA....y...RtlGetCallersAddress.n |
| 36700 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 36720 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 | 2991..............0.......61.... |
| 36740 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 7a 02 04 00 52 74 6c 47 65 74 | ....`.......d.?.yA)...z...RtlGet |
| 36760 | 43 6f 6d 70 72 65 73 73 69 6f 6e 57 6f 72 6b 53 70 61 63 65 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 | CompressionWorkSpaceSize.ntdll.d |
| 36780 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 367a0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a | ............0.......62........`. |
| 367c0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 2a 00 00 00 7b 02 04 00 52 74 6c 47 65 74 43 6f 6e 74 72 6f | ......d.?.yA*...{...RtlGetContro |
| 367e0 | 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | lSecurityDescriptor.ntdll.dll.nt |
| 36800 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 36820 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......66........`....... |
| 36840 | 64 86 3f ac 79 41 2e 00 00 00 7c 02 04 00 52 74 6c 47 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 | d.?.yA....|...RtlGetCriticalSect |
| 36860 | 69 6f 6e 52 65 63 75 72 73 69 6f 6e 43 6f 75 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ionRecursionCount.ntdll.dll.ntdl |
| 36880 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 368a0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......55........`.......d. |
| 368c0 | 3f ac 79 41 23 00 00 00 7d 02 04 00 52 74 6c 47 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f | ?.yA#...}...RtlGetCurrentDirecto |
| 368e0 | 72 79 5f 55 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ry_U.ntdll.dll..ntdll.dll/...... |
| 36900 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 36920 | 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 7e 02 04 00 | 47........`.......d.?.yA....~... |
| 36940 | 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 65 62 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | RtlGetCurrentPeb.ntdll.dll..ntdl |
| 36960 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 36980 | 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......59........`.......d. |
| 369a0 | 3f ac 79 41 27 00 00 00 7f 02 04 00 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 | ?.yA'.......RtlGetCurrentProcess |
| 369c0 | 6f 72 4e 75 6d 62 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | orNumber.ntdll.dll..ntdll.dll/.. |
| 369e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 36a00 | 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 | ....59........`.......d.?.yA'... |
| 36a20 | 80 02 04 00 52 74 6c 47 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 | ....RtlGetDaclSecurityDescriptor |
| 36a40 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 36a60 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 | 492991..............0.......56.. |
| 36a80 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 81 02 04 00 52 74 6c 47 | ......`.......d.?.yA$.......RtlG |
| 36aa0 | 65 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | etElementGenericTable.ntdll.dll. |
| 36ac0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 36ae0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......59........`..... |
| 36b00 | 00 00 64 86 3f ac 79 41 27 00 00 00 82 02 04 00 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74 47 65 6e | ..d.?.yA'.......RtlGetElementGen |
| 36b20 | 65 72 69 63 54 61 62 6c 65 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ericTableAvl.ntdll.dll..ntdll.dl |
| 36b40 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 36b60 | 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......42........`.......d.?.yA |
| 36b80 | 16 00 00 00 83 02 04 00 52 74 6c 47 65 74 46 72 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ........RtlGetFrame.ntdll.dll.nt |
| 36ba0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 36bc0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 36be0 | 64 86 3f ac 79 41 1f 00 00 00 84 02 04 00 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 | d.?.yA........RtlGetFullPathName |
| 36c00 | 5f 55 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | _U.ntdll.dll..ntdll.dll/......10 |
| 36c20 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 36c40 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 85 02 04 00 52 74 | ........`.......d.?.yA$.......Rt |
| 36c60 | 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 73 74 72 45 78 00 6e 74 64 6c 6c 2e 64 6c | lGetFullPathName_UstrEx.ntdll.dl |
| 36c80 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 36ca0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......58........`... |
| 36cc0 | ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 86 02 04 00 52 74 6c 47 65 74 46 75 6e 63 74 69 6f 6e | ....d.?.yA&.......RtlGetFunction |
| 36ce0 | 54 61 62 6c 65 4c 69 73 74 48 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | TableListHead.ntdll.dll.ntdll.dl |
| 36d00 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 36d20 | 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......60........`.......d.?.yA |
| 36d40 | 28 00 00 00 87 02 04 00 52 74 6c 47 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72 | (.......RtlGetGroupSecurityDescr |
| 36d60 | 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | iptor.ntdll.dll.ntdll.dll/...... |
| 36d80 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 36da0 | 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 88 02 04 00 | 49........`.......d.?.yA........ |
| 36dc0 | 52 74 6c 47 65 74 4c 61 73 74 4e 74 53 74 61 74 75 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | RtlGetLastNtStatus.ntdll.dll..nt |
| 36de0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 36e00 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 36e20 | 64 86 3f ac 79 41 1f 00 00 00 89 02 04 00 52 74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 | d.?.yA........RtlGetLastWin32Err |
| 36e40 | 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | or.ntdll.dll..ntdll.dll/......10 |
| 36e60 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 36 | 98492991..............0.......76 |
| 36e80 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 38 00 00 00 8a 02 04 00 52 74 | ........`.......d.?.yA8.......Rt |
| 36ea0 | 6c 47 65 74 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 4c 61 73 74 46 75 6c 6c 44 6f 73 4f 72 4e 74 | lGetLengthWithoutLastFullDosOrNt |
| 36ec0 | 50 61 74 68 45 6c 65 6d 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | PathElement.ntdll.dll.ntdll.dll/ |
| 36ee0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 36f00 | 20 20 20 20 20 20 37 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 34 00 | ......72........`.......d.?.yA4. |
| 36f20 | 00 00 8b 02 04 00 52 74 6c 47 65 74 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 54 72 61 69 6c 69 6e | ......RtlGetLengthWithoutTrailin |
| 36f40 | 67 50 61 74 68 53 65 70 65 72 61 74 6f 72 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | gPathSeperators.ntdll.dll.ntdll. |
| 36f60 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 36f80 | 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......56........`.......d.?. |
| 36fa0 | 79 41 24 00 00 00 8c 02 04 00 52 74 6c 47 65 74 4c 6f 6e 67 65 73 74 4e 74 50 61 74 68 4c 65 6e | yA$.......RtlGetLongestNtPathLen |
| 36fc0 | 67 74 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | gth.ntdll.dll.ntdll.dll/......10 |
| 36fe0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 | 98492991..............0.......60 |
| 37000 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 8d 02 04 00 52 74 | ........`.......d.?.yA(.......Rt |
| 37020 | 6c 47 65 74 4e 61 74 69 76 65 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c | lGetNativeSystemInformation.ntdl |
| 37040 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 37060 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 | ..............0.......50........ |
| 37080 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 8e 02 04 00 52 74 6c 47 65 74 4e 74 47 6c | `.......d.?.yA........RtlGetNtGl |
| 370a0 | 6f 62 61 6c 46 6c 61 67 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | obalFlags.ntdll.dll.ntdll.dll/.. |
| 370c0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 370e0 | 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 | ....50........`.......d.?.yA.... |
| 37100 | 8f 02 04 00 52 74 6c 47 65 74 4e 74 50 72 6f 64 75 63 74 54 79 70 65 00 6e 74 64 6c 6c 2e 64 6c | ....RtlGetNtProductType.ntdll.dl |
| 37120 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 37140 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......53........`... |
| 37160 | ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 90 02 04 00 52 74 6c 47 65 74 4e 74 56 65 72 73 69 6f | ....d.?.yA!.......RtlGetNtVersio |
| 37180 | 6e 4e 75 6d 62 65 72 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | nNumbers.ntdll.dll..ntdll.dll/.. |
| 371a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 371c0 | 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 | ....60........`.......d.?.yA(... |
| 371e0 | 91 02 04 00 52 74 6c 47 65 74 4f 77 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f | ....RtlGetOwnerSecurityDescripto |
| 37200 | 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | r.ntdll.dll.ntdll.dll/......1098 |
| 37220 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 37240 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 92 02 04 00 52 74 6c 47 | ......`.......d.?.yA........RtlG |
| 37260 | 65 74 50 72 6f 63 65 73 73 48 65 61 70 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | etProcessHeaps.ntdll.dll..ntdll. |
| 37280 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 372a0 | 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......59........`.......d.?. |
| 372c0 | 79 41 27 00 00 00 93 02 04 00 52 74 6c 47 65 74 53 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63 | yA'.......RtlGetSaclSecurityDesc |
| 372e0 | 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | riptor.ntdll.dll..ntdll.dll/.... |
| 37300 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 37320 | 20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2c 00 00 00 94 02 | ..64........`.......d.?.yA,..... |
| 37340 | 04 00 52 74 6c 47 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 | ..RtlGetSecurityDescriptorRMCont |
| 37360 | 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | rol.ntdll.dll.ntdll.dll/......10 |
| 37380 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 373a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 95 02 04 00 52 74 | ........`.......d.?.yA".......Rt |
| 373c0 | 6c 47 65 74 53 65 74 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | lGetSetBootStatusData.ntdll.dll. |
| 373e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 37400 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 37420 | 00 00 64 86 3f ac 79 41 20 00 00 00 96 02 04 00 52 74 6c 47 65 74 54 68 72 65 61 64 45 72 72 6f | ..d.?.yA........RtlGetThreadErro |
| 37440 | 72 4d 6f 64 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | rMode.ntdll.dll.ntdll.dll/...... |
| 37460 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 37480 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 97 02 04 00 | 53........`.......d.?.yA!....... |
| 374a0 | 52 74 6c 47 65 74 55 6e 6c 6f 61 64 45 76 65 6e 74 54 72 61 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c | RtlGetUnloadEventTrace.ntdll.dll |
| 374c0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 374e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......49........`... |
| 37500 | ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 98 02 04 00 52 74 6c 47 65 74 55 73 65 72 49 6e 66 6f | ....d.?.yA........RtlGetUserInfo |
| 37520 | 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Heap.ntdll.dll..ntdll.dll/...... |
| 37540 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 37560 | 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 99 02 04 00 | 44........`.......d.?.yA........ |
| 37580 | 52 74 6c 47 65 74 56 65 72 73 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | RtlGetVersion.ntdll.dll.ntdll.dl |
| 375a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 375c0 | 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......51........`.......d.?.yA |
| 375e0 | 1f 00 00 00 9a 02 04 00 52 74 6c 48 61 73 68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 | ........RtlHashUnicodeString.ntd |
| 37600 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 37620 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 | 91..............0.......56...... |
| 37640 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 9b 02 04 00 52 74 6c 49 64 65 6e 74 | ..`.......d.?.yA$.......RtlIdent |
| 37660 | 69 66 69 65 72 41 75 74 68 6f 72 69 74 79 53 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ifierAuthoritySid.ntdll.dll.ntdl |
| 37680 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 376a0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......59........`.......d. |
| 376c0 | 3f ac 79 41 27 00 00 00 9c 02 04 00 52 74 6c 49 6d 61 67 65 44 69 72 65 63 74 6f 72 79 45 6e 74 | ?.yA'.......RtlImageDirectoryEnt |
| 376e0 | 72 79 54 6f 44 61 74 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ryToData.ntdll.dll..ntdll.dll/.. |
| 37700 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 37720 | 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 | ....47........`.......d.?.yA.... |
| 37740 | 9d 02 04 00 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ....RtlImageNtHeader.ntdll.dll.. |
| 37760 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 37780 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 377a0 | 00 00 64 86 3f ac 79 41 1d 00 00 00 9e 02 04 00 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 | ..d.?.yA........RtlImageNtHeader |
| 377c0 | 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | Ex.ntdll.dll..ntdll.dll/......10 |
| 377e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 | 98492991..............0.......51 |
| 37800 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 9f 02 04 00 52 74 | ........`.......d.?.yA........Rt |
| 37820 | 6c 49 6d 61 67 65 52 76 61 54 6f 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | lImageRvaToSection.ntdll.dll..nt |
| 37840 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 37860 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......46........`....... |
| 37880 | 64 86 3f ac 79 41 1a 00 00 00 a0 02 04 00 52 74 6c 49 6d 61 67 65 52 76 61 54 6f 56 61 00 6e 74 | d.?.yA........RtlImageRvaToVa.nt |
| 378a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 378c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 | 91..............0.......49...... |
| 378e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 a1 02 04 00 52 74 6c 49 6d 70 65 72 | ..`.......d.?.yA........RtlImper |
| 37900 | 73 6f 6e 61 74 65 53 65 6c 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | sonateSelf.ntdll.dll..ntdll.dll/ |
| 37920 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 37940 | 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 | ......48........`.......d.?.yA.. |
| 37960 | 00 00 a2 02 04 00 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c | ......RtlInitAnsiString.ntdll.dl |
| 37980 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 379a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......50........`... |
| 379c0 | ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 a3 02 04 00 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 | ....d.?.yA........RtlInitAnsiStr |
| 379e0 | 69 6e 67 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ingEx.ntdll.dll.ntdll.dll/...... |
| 37a00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 37a20 | 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 a4 02 04 00 | 51........`.......d.?.yA........ |
| 37a40 | 52 74 6c 49 6e 69 74 43 6f 64 65 50 61 67 65 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | RtlInitCodePageTable.ntdll.dll.. |
| 37a60 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 37a80 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 37aa0 | 00 00 64 86 3f ac 79 41 1e 00 00 00 a5 02 04 00 52 74 6c 49 6e 69 74 4d 65 6d 6f 72 79 53 74 72 | ..d.?.yA........RtlInitMemoryStr |
| 37ac0 | 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eam.ntdll.dll.ntdll.dll/......10 |
| 37ae0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 | 98492991..............0.......47 |
| 37b00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 a6 02 04 00 52 74 | ........`.......d.?.yA........Rt |
| 37b20 | 6c 49 6e 69 74 4e 6c 73 54 61 62 6c 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | lInitNlsTables.ntdll.dll..ntdll. |
| 37b40 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 37b60 | 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......62........`.......d.?. |
| 37b80 | 79 41 2a 00 00 00 a7 02 04 00 52 74 6c 49 6e 69 74 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d | yA*.......RtlInitOutOfProcessMem |
| 37ba0 | 6f 72 79 53 74 72 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | oryStream.ntdll.dll.ntdll.dll/.. |
| 37bc0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 37be0 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 37c00 | a8 02 04 00 52 74 6c 49 6e 69 74 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....RtlInitString.ntdll.dll.ntdl |
| 37c20 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 37c40 | 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......51........`.......d. |
| 37c60 | 3f ac 79 41 1f 00 00 00 a9 02 04 00 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 | ?.yA........RtlInitUnicodeString |
| 37c80 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 37ca0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 | 492991..............0.......53.. |
| 37cc0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 aa 02 04 00 52 74 6c 49 | ......`.......d.?.yA!.......RtlI |
| 37ce0 | 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | nitUnicodeStringEx.ntdll.dll..nt |
| 37d00 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 37d20 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......55........`....... |
| 37d40 | 64 86 3f ac 79 41 23 00 00 00 ab 02 04 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 41 74 6f 6d 50 | d.?.yA#.......RtlInitializeAtomP |
| 37d60 | 61 63 6b 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ackage.ntdll.dll..ntdll.dll/.... |
| 37d80 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 37da0 | 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 ac 02 | ..50........`.......d.?.yA...... |
| 37dc0 | 04 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 42 69 74 4d 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..RtlInitializeBitMap.ntdll.dll. |
| 37de0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 37e00 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 37e20 | 00 00 64 86 3f ac 79 41 1f 00 00 00 ad 02 04 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 6f 6e | ..d.?.yA........RtlInitializeCon |
| 37e40 | 74 65 78 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | text.ntdll.dll..ntdll.dll/...... |
| 37e60 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 37e80 | 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 ae 02 04 00 | 59........`.......d.?.yA'....... |
| 37ea0 | 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 6e 74 64 | RtlInitializeCriticalSection.ntd |
| 37ec0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 37ee0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 31 20 20 20 20 20 20 | 91..............0.......71...... |
| 37f00 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 33 00 00 00 af 02 04 00 52 74 6c 49 6e 69 74 69 | ..`.......d.?.yA3.......RtlIniti |
| 37f20 | 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 41 6e 64 53 70 69 6e 43 6f 75 6e 74 | alizeCriticalSectionAndSpinCount |
| 37f40 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 37f60 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 | 492991..............0.......56.. |
| 37f80 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 b0 02 04 00 52 74 6c 49 | ......`.......d.?.yA$.......RtlI |
| 37fa0 | 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | nitializeGenericTable.ntdll.dll. |
| 37fc0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 37fe0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......59........`..... |
| 38000 | 00 00 64 86 3f ac 79 41 27 00 00 00 b1 02 04 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 47 65 6e | ..d.?.yA'.......RtlInitializeGen |
| 38020 | 65 72 69 63 54 61 62 6c 65 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ericTableAvl.ntdll.dll..ntdll.dl |
| 38040 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 38060 | 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......55........`.......d.?.yA |
| 38080 | 23 00 00 00 b2 02 04 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61 6e 64 6c 65 54 61 62 6c 65 | #.......RtlInitializeHandleTable |
| 380a0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 380c0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 380e0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 b3 02 04 00 52 74 6c 49 | ......`.......d.?.yA........RtlI |
| 38100 | 6e 69 74 69 61 6c 69 7a 65 52 58 61 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | nitializeRXact.ntdll.dll..ntdll. |
| 38120 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 38140 | 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......52........`.......d.?. |
| 38160 | 79 41 20 00 00 00 b4 02 04 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 65 73 6f 75 72 63 65 00 | yA........RtlInitializeResource. |
| 38180 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 381a0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 | 2991..............0.......53.... |
| 381c0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 b5 02 04 00 52 74 6c 49 6e 69 | ....`.......d.?.yA!.......RtlIni |
| 381e0 | 74 69 61 6c 69 7a 65 53 4c 69 73 74 48 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | tializeSListHead.ntdll.dll..ntdl |
| 38200 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 38220 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 38240 | 3f ac 79 41 1b 00 00 00 b6 02 04 00 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 69 64 00 6e 74 64 | ?.yA........RtlInitializeSid.ntd |
| 38260 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 38280 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 | 91..............0.......59...... |
| 382a0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 b7 02 04 00 52 74 6c 49 6e 73 65 72 | ..`.......d.?.yA'.......RtlInser |
| 382c0 | 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | tElementGenericTable.ntdll.dll.. |
| 382e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 38300 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......62........`..... |
| 38320 | 00 00 64 86 3f ac 79 41 2a 00 00 00 b8 02 04 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 | ..d.?.yA*.......RtlInsertElement |
| 38340 | 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | GenericTableAvl.ntdll.dll.ntdll. |
| 38360 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 38380 | 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......63........`.......d.?. |
| 383a0 | 79 41 2b 00 00 00 b9 02 04 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 | yA+.......RtlInsertElementGeneri |
| 383c0 | 63 54 61 62 6c 65 46 75 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | cTableFull.ntdll.dll..ntdll.dll/ |
| 383e0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 38400 | 20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2e 00 | ......66........`.......d.?.yA.. |
| 38420 | 00 00 ba 02 04 00 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 | ......RtlInsertElementGenericTab |
| 38440 | 6c 65 46 75 6c 6c 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | leFullAvl.ntdll.dll.ntdll.dll/.. |
| 38460 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 38480 | 20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2a 00 00 00 | ....62........`.......d.?.yA*... |
| 384a0 | bb 02 04 00 52 74 6c 49 6e 73 74 61 6c 6c 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 43 61 6c 6c 62 | ....RtlInstallFunctionTableCallb |
| 384c0 | 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ack.ntdll.dll.ntdll.dll/......10 |
| 384e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 38500 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 bc 02 04 00 52 74 | ........`.......d.?.yA".......Rt |
| 38520 | 6c 49 6e 74 36 34 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | lInt64ToUnicodeString.ntdll.dll. |
| 38540 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 38560 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......47........`..... |
| 38580 | 00 00 64 86 3f ac 79 41 1b 00 00 00 bd 02 04 00 52 74 6c 49 6e 74 65 67 65 72 54 6f 43 68 61 72 | ..d.?.yA........RtlIntegerToChar |
| 385a0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 385c0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 | 492991..............0.......56.. |
| 385e0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 be 02 04 00 52 74 6c 49 | ......`.......d.?.yA$.......RtlI |
| 38600 | 6e 74 65 67 65 72 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ntegerToUnicodeString.ntdll.dll. |
| 38620 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 38640 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......55........`..... |
| 38660 | 00 00 64 86 3f ac 79 41 23 00 00 00 bf 02 04 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 46 6c | ..d.?.yA#.......RtlInterlockedFl |
| 38680 | 75 73 68 53 4c 69 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ushSList.ntdll.dll..ntdll.dll/.. |
| 386a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 386c0 | 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 | ....58........`.......d.?.yA&... |
| 386e0 | c0 02 04 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 6f 70 45 6e 74 72 79 53 4c 69 73 74 00 | ....RtlInterlockedPopEntrySList. |
| 38700 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 38720 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 | 2991..............0.......59.... |
| 38740 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 c1 02 04 00 52 74 6c 49 6e 74 | ....`.......d.?.yA'.......RtlInt |
| 38760 | 65 72 6c 6f 63 6b 65 64 50 75 73 68 45 6e 74 72 79 53 4c 69 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c | erlockedPushEntrySList.ntdll.dll |
| 38780 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 387a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......58........`... |
| 387c0 | ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 c2 02 04 00 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 | ....d.?.yA&.......RtlInterlocked |
| 387e0 | 50 75 73 68 4c 69 73 74 53 4c 69 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | PushListSList.ntdll.dll.ntdll.dl |
| 38800 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 38820 | 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......54........`.......d.?.yA |
| 38840 | 22 00 00 00 c3 02 04 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 | ".......RtlIpv4AddressToStringA. |
| 38860 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 38880 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 | 2991..............0.......56.... |
| 388a0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 c4 02 04 00 52 74 6c 49 70 76 | ....`.......d.?.yA$.......RtlIpv |
| 388c0 | 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 41 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | 4AddressToStringExA.ntdll.dll.nt |
| 388e0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 38900 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......56........`....... |
| 38920 | 64 86 3f ac 79 41 24 00 00 00 c5 02 04 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 | d.?.yA$.......RtlIpv4AddressToSt |
| 38940 | 72 69 6e 67 45 78 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ringExW.ntdll.dll.ntdll.dll/.... |
| 38960 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 38980 | 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 c6 02 | ..54........`.......d.?.yA"..... |
| 389a0 | 04 00 52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 57 00 6e 74 64 6c 6c 2e | ..RtlIpv4AddressToStringW.ntdll. |
| 389c0 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 389e0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a | ............0.......54........`. |
| 38a00 | 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 c7 02 04 00 52 74 6c 49 70 76 34 53 74 72 69 6e | ......d.?.yA".......RtlIpv4Strin |
| 38a20 | 67 54 6f 41 64 64 72 65 73 73 41 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | gToAddressA.ntdll.dll.ntdll.dll/ |
| 38a40 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 38a60 | 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 | ......56........`.......d.?.yA$. |
| 38a80 | 00 00 c8 02 04 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 41 00 | ......RtlIpv4StringToAddressExA. |
| 38aa0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 38ac0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 | 2991..............0.......56.... |
| 38ae0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 c9 02 04 00 52 74 6c 49 70 76 | ....`.......d.?.yA$.......RtlIpv |
| 38b00 | 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | 4StringToAddressExW.ntdll.dll.nt |
| 38b20 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 38b40 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......54........`....... |
| 38b60 | 64 86 3f ac 79 41 22 00 00 00 ca 02 04 00 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 | d.?.yA".......RtlIpv4StringToAdd |
| 38b80 | 72 65 73 73 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ressW.ntdll.dll.ntdll.dll/...... |
| 38ba0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 38bc0 | 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 cb 02 04 00 | 54........`.......d.?.yA"....... |
| 38be0 | 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 00 6e 74 64 6c 6c 2e 64 6c | RtlIpv6AddressToStringA.ntdll.dl |
| 38c00 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 38c20 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......56........`... |
| 38c40 | ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 cc 02 04 00 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 | ....d.?.yA$.......RtlIpv6Address |
| 38c60 | 54 6f 53 74 72 69 6e 67 45 78 41 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ToStringExA.ntdll.dll.ntdll.dll/ |
| 38c80 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 38ca0 | 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 | ......56........`.......d.?.yA$. |
| 38cc0 | 00 00 cd 02 04 00 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 00 | ......RtlIpv6AddressToStringExW. |
| 38ce0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 38d00 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 | 2991..............0.......54.... |
| 38d20 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 ce 02 04 00 52 74 6c 49 70 76 | ....`.......d.?.yA".......RtlIpv |
| 38d40 | 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | 6AddressToStringW.ntdll.dll.ntdl |
| 38d60 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 38d80 | 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......54........`.......d. |
| 38da0 | 3f ac 79 41 22 00 00 00 cf 02 04 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 | ?.yA".......RtlIpv6StringToAddre |
| 38dc0 | 73 73 41 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ssA.ntdll.dll.ntdll.dll/......10 |
| 38de0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 38e00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 d0 02 04 00 52 74 | ........`.......d.?.yA$.......Rt |
| 38e20 | 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 41 00 6e 74 64 6c 6c 2e 64 6c | lIpv6StringToAddressExA.ntdll.dl |
| 38e40 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 38e60 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......56........`... |
| 38e80 | ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 d1 02 04 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 | ....d.?.yA$.......RtlIpv6StringT |
| 38ea0 | 6f 41 64 64 72 65 73 73 45 78 57 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | oAddressExW.ntdll.dll.ntdll.dll/ |
| 38ec0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 38ee0 | 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 | ......54........`.......d.?.yA". |
| 38f00 | 00 00 d2 02 04 00 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 57 00 6e 74 | ......RtlIpv6StringToAddressW.nt |
| 38f20 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 38f40 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 | 91..............0.......59...... |
| 38f60 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 d3 02 04 00 52 74 6c 49 73 41 63 74 | ..`.......d.?.yA'.......RtlIsAct |
| 38f80 | 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 41 63 74 69 76 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ivationContextActive.ntdll.dll.. |
| 38fa0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 38fc0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......57........`..... |
| 38fe0 | 00 00 64 86 3f ac 79 41 25 00 00 00 d4 02 04 00 52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 | ..d.?.yA%.......RtlIsCriticalSec |
| 39000 | 74 69 6f 6e 4c 6f 63 6b 65 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | tionLocked.ntdll.dll..ntdll.dll/ |
| 39020 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 39040 | 20 20 20 20 20 20 36 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2d 00 | ......65........`.......d.?.yA-. |
| 39060 | 00 00 d5 02 04 00 52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 | ......RtlIsCriticalSectionLocked |
| 39080 | 42 79 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ByThread.ntdll.dll..ntdll.dll/.. |
| 390a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 390c0 | 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 | ....51........`.......d.?.yA.... |
| 390e0 | d6 02 04 00 52 74 6c 49 73 44 6f 73 44 65 76 69 63 65 4e 61 6d 65 5f 55 00 6e 74 64 6c 6c 2e 64 | ....RtlIsDosDeviceName_U.ntdll.d |
| 39100 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 39120 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a | ............0.......53........`. |
| 39140 | 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 d7 02 04 00 52 74 6c 49 73 47 65 6e 65 72 69 63 | ......d.?.yA!.......RtlIsGeneric |
| 39160 | 54 61 62 6c 65 45 6d 70 74 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | TableEmpty.ntdll.dll..ntdll.dll/ |
| 39180 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 391a0 | 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 | ......56........`.......d.?.yA$. |
| 391c0 | 00 00 d8 02 04 00 52 74 6c 49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74 79 41 76 6c 00 | ......RtlIsGenericTableEmptyAvl. |
| 391e0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 39200 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 | 2991..............0.......53.... |
| 39220 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 d9 02 04 00 52 74 6c 49 73 4e | ....`.......d.?.yA!.......RtlIsN |
| 39240 | 61 6d 65 4c 65 67 61 6c 44 4f 53 38 44 6f 74 33 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ameLegalDOS8Dot3.ntdll.dll..ntdl |
| 39260 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 39280 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 392a0 | 3f ac 79 41 1b 00 00 00 da 02 04 00 52 74 6c 49 73 54 65 78 74 55 6e 69 63 6f 64 65 00 6e 74 64 | ?.yA........RtlIsTextUnicode.ntd |
| 392c0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 392e0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20 | 91..............0.......61...... |
| 39300 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 db 02 04 00 52 74 6c 49 73 54 68 72 | ..`.......d.?.yA).......RtlIsThr |
| 39320 | 65 61 64 57 69 74 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c 6f 75 74 00 6e 74 64 6c 6c 2e 64 6c 6c | eadWithinLoaderCallout.ntdll.dll |
| 39340 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 39360 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......47........`... |
| 39380 | ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 dc 02 04 00 52 74 6c 49 73 56 61 6c 69 64 48 61 6e 64 | ....d.?.yA........RtlIsValidHand |
| 393a0 | 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | le.ntdll.dll..ntdll.dll/......10 |
| 393c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 | 98492991..............0.......52 |
| 393e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 dd 02 04 00 52 74 | ........`.......d.?.yA........Rt |
| 39400 | 6c 49 73 56 61 6c 69 64 49 6e 64 65 78 48 61 6e 64 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | lIsValidIndexHandle.ntdll.dll.nt |
| 39420 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 39440 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......52........`....... |
| 39460 | 64 86 3f ac 79 41 20 00 00 00 de 02 04 00 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72 54 6f 43 | d.?.yA........RtlLargeIntegerToC |
| 39480 | 68 61 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | har.ntdll.dll.ntdll.dll/......10 |
| 394a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 | 98492991..............0.......54 |
| 394c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 df 02 04 00 52 74 | ........`.......d.?.yA".......Rt |
| 394e0 | 6c 4c 65 61 76 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | lLeaveCriticalSection.ntdll.dll. |
| 39500 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 39520 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 39540 | 00 00 64 86 3f ac 79 41 1f 00 00 00 e0 02 04 00 52 74 6c 4c 65 6e 67 74 68 52 65 71 75 69 72 65 | ..d.?.yA........RtlLengthRequire |
| 39560 | 64 53 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | dSid.ntdll.dll..ntdll.dll/...... |
| 39580 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 395a0 | 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 e1 02 04 00 | 58........`.......d.?.yA&....... |
| 395c0 | 52 74 6c 4c 65 6e 67 74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c | RtlLengthSecurityDescriptor.ntdl |
| 395e0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 39600 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 | ..............0.......43........ |
| 39620 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 e2 02 04 00 52 74 6c 4c 65 6e 67 74 68 53 | `.......d.?.yA........RtlLengthS |
| 39640 | 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | id.ntdll.dll..ntdll.dll/......10 |
| 39660 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 | 98492991..............0.......55 |
| 39680 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 e3 02 04 00 52 74 | ........`.......d.?.yA#.......Rt |
| 396a0 | 6c 4c 6f 63 61 6c 54 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c | lLocalTimeToSystemTime.ntdll.dll |
| 396c0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 396e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......52........`... |
| 39700 | ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 e4 02 04 00 52 74 6c 4c 6f 63 6b 42 6f 6f 74 53 74 61 | ....d.?.yA........RtlLockBootSta |
| 39720 | 74 75 73 44 61 74 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | tusData.ntdll.dll.ntdll.dll/.... |
| 39740 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 39760 | 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 e5 02 | ..42........`.......d.?.yA...... |
| 39780 | 04 00 52 74 6c 4c 6f 63 6b 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ..RtlLockHeap.ntdll.dll.ntdll.dl |
| 397a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 397c0 | 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......56........`.......d.?.yA |
| 397e0 | 24 00 00 00 e6 02 04 00 52 74 6c 4c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f | $.......RtlLockMemoryStreamRegio |
| 39800 | 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | n.ntdll.dll.ntdll.dll/......1098 |
| 39820 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 | 492991..............0.......51.. |
| 39840 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 e7 02 04 00 52 74 6c 4c | ......`.......d.?.yA........RtlL |
| 39860 | 6f 67 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ogStackBackTrace.ntdll.dll..ntdl |
| 39880 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 398a0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......55........`.......d. |
| 398c0 | 3f ac 79 41 23 00 00 00 e8 02 04 00 52 74 6c 4c 6f 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d 54 | ?.yA#.......RtlLookupAtomInAtomT |
| 398e0 | 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | able.ntdll.dll..ntdll.dll/...... |
| 39900 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 39920 | 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 e9 02 04 00 | 59........`.......d.?.yA'....... |
| 39940 | 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 00 6e 74 64 | RtlLookupElementGenericTable.ntd |
| 39960 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 39980 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 | 91..............0.......62...... |
| 399a0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2a 00 00 00 ea 02 04 00 52 74 6c 4c 6f 6f 6b 75 | ..`.......d.?.yA*.......RtlLooku |
| 399c0 | 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c | pElementGenericTableAvl.ntdll.dl |
| 399e0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 39a00 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......63........`... |
| 39a20 | ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 eb 02 04 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 | ....d.?.yA+.......RtlLookupEleme |
| 39a40 | 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ntGenericTableFull.ntdll.dll..nt |
| 39a60 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 39a80 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......66........`....... |
| 39aa0 | 64 86 3f ac 79 41 2e 00 00 00 ec 02 04 00 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 | d.?.yA........RtlLookupElementGe |
| 39ac0 | 6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | nericTableFullAvl.ntdll.dll.ntdl |
| 39ae0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 39b00 | 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......53........`.......d. |
| 39b20 | 3f ac 79 41 21 00 00 00 ed 02 04 00 52 74 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 45 6e 74 | ?.yA!.......RtlLookupFunctionEnt |
| 39b40 | 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ry.ntdll.dll..ntdll.dll/......10 |
| 39b60 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 | 98492991..............0.......53 |
| 39b80 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 ee 02 04 00 52 74 | ........`.......d.?.yA!.......Rt |
| 39ba0 | 6c 4c 6f 6f 6b 75 70 46 75 6e 63 74 69 6f 6e 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | lLookupFunctionTable.ntdll.dll.. |
| 39bc0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 39be0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 39c00 | 00 00 64 86 3f ac 79 41 20 00 00 00 ef 02 04 00 52 74 6c 4d 61 6b 65 53 65 6c 66 52 65 6c 61 74 | ..d.?.yA........RtlMakeSelfRelat |
| 39c20 | 69 76 65 53 44 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | iveSD.ntdll.dll.ntdll.dll/...... |
| 39c40 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 39c60 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 f0 02 04 00 | 48........`.......d.?.yA........ |
| 39c80 | 52 74 6c 4d 61 70 47 65 6e 65 72 69 63 4d 61 73 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | RtlMapGenericMask.ntdll.dll.ntdl |
| 39ca0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 39cc0 | 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......60........`.......d. |
| 39ce0 | 3f ac 79 41 28 00 00 00 f1 02 04 00 52 74 6c 4d 61 70 53 65 63 75 72 69 74 79 45 72 72 6f 72 54 | ?.yA(.......RtlMapSecurityErrorT |
| 39d00 | 6f 4e 74 53 74 61 74 75 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | oNtStatus.ntdll.dll.ntdll.dll/.. |
| 39d20 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 39d40 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 39d60 | f2 02 04 00 52 74 6c 4d 6f 76 65 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....RtlMoveMemory.ntdll.dll.ntdl |
| 39d80 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 39da0 | 20 20 20 20 30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......64........`.......d. |
| 39dc0 | 3f ac 79 41 2c 00 00 00 f3 02 04 00 52 74 6c 4d 75 6c 74 69 41 70 70 65 6e 64 55 6e 69 63 6f 64 | ?.yA,.......RtlMultiAppendUnicod |
| 39de0 | 65 53 74 72 69 6e 67 42 75 66 66 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | eStringBuffer.ntdll.dll.ntdll.dl |
| 39e00 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 39e20 | 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......53........`.......d.?.yA |
| 39e40 | 21 00 00 00 f4 02 04 00 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e 00 6e | !.......RtlMultiByteToUnicodeN.n |
| 39e60 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 39e80 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 | 2991..............0.......56.... |
| 39ea0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 f5 02 04 00 52 74 6c 4d 75 6c | ....`.......d.?.yA$.......RtlMul |
| 39ec0 | 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | tiByteToUnicodeSize.ntdll.dll.nt |
| 39ee0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 39f00 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......54........`....... |
| 39f20 | 64 86 3f ac 79 41 22 00 00 00 f6 02 04 00 52 74 6c 4d 75 6c 74 69 70 6c 65 41 6c 6c 6f 63 61 74 | d.?.yA".......RtlMultipleAllocat |
| 39f40 | 65 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eHeap.ntdll.dll.ntdll.dll/...... |
| 39f60 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 39f80 | 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 f7 02 04 00 | 50........`.......d.?.yA........ |
| 39fa0 | 52 74 6c 4d 75 6c 74 69 70 6c 65 46 72 65 65 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | RtlMultipleFreeHeap.ntdll.dll.nt |
| 39fc0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 39fe0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......59........`....... |
| 3a000 | 64 86 3f ac 79 41 27 00 00 00 f8 02 04 00 52 74 6c 4e 65 77 49 6e 73 74 61 6e 63 65 53 65 63 75 | d.?.yA'.......RtlNewInstanceSecu |
| 3a020 | 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | rityObject.ntdll.dll..ntdll.dll/ |
| 3a040 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3a060 | 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 | ......58........`.......d.?.yA&. |
| 3a080 | 00 00 f9 02 04 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 47 72 61 6e 74 65 64 41 63 63 65 73 | ......RtlNewSecurityGrantedAcces |
| 3a0a0 | 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | s.ntdll.dll.ntdll.dll/......1098 |
| 3a0c0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 | 492991..............0.......51.. |
| 3a0e0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 fa 02 04 00 52 74 6c 4e | ......`.......d.?.yA........RtlN |
| 3a100 | 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ewSecurityObject.ntdll.dll..ntdl |
| 3a120 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3a140 | 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......53........`.......d. |
| 3a160 | 3f ac 79 41 21 00 00 00 fb 02 04 00 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 | ?.yA!.......RtlNewSecurityObject |
| 3a180 | 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | Ex.ntdll.dll..ntdll.dll/......10 |
| 3a1a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 34 | 98492991..............0.......74 |
| 3a1c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 36 00 00 00 fc 02 04 00 52 74 | ........`.......d.?.yA6.......Rt |
| 3a1e0 | 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 57 69 74 68 4d 75 6c 74 69 70 6c 65 49 6e | lNewSecurityObjectWithMultipleIn |
| 3a200 | 68 65 72 69 74 61 6e 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | heritance.ntdll.dll.ntdll.dll/.. |
| 3a220 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3a240 | 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 | ....56........`.......d.?.yA$... |
| 3a260 | fd 02 04 00 52 74 6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 6e 74 | ....RtlNormalizeProcessParams.nt |
| 3a280 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3a2a0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 | 91..............0.......57...... |
| 3a2c0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 fe 02 04 00 52 74 6c 4e 74 50 61 74 | ..`.......d.?.yA%.......RtlNtPat |
| 3a2e0 | 68 4e 61 6d 65 54 6f 44 6f 73 50 61 74 68 4e 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | hNameToDosPathName.ntdll.dll..nt |
| 3a300 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3a320 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......52........`....... |
| 3a340 | 64 86 3f ac 79 41 20 00 00 00 ff 02 04 00 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 | d.?.yA........RtlNtStatusToDosEr |
| 3a360 | 72 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ror.ntdll.dll.ntdll.dll/......10 |
| 3a380 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 | 98492991..............0.......57 |
| 3a3a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 00 03 04 00 52 74 | ........`.......d.?.yA%.......Rt |
| 3a3c0 | 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 72 6f 72 4e 6f 54 65 62 00 6e 74 64 6c 6c 2e 64 | lNtStatusToDosErrorNoTeb.ntdll.d |
| 3a3e0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 3a400 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a | ............0.......60........`. |
| 3a420 | 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 01 03 04 00 52 74 6c 4e 75 6d 62 65 72 47 65 6e | ......d.?.yA(.......RtlNumberGen |
| 3a440 | 65 72 69 63 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ericTableElements.ntdll.dll.ntdl |
| 3a460 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3a480 | 20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......63........`.......d. |
| 3a4a0 | 3f ac 79 41 2b 00 00 00 02 03 04 00 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54 61 62 6c | ?.yA+.......RtlNumberGenericTabl |
| 3a4c0 | 65 45 6c 65 6d 65 6e 74 73 41 76 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | eElementsAvl.ntdll.dll..ntdll.dl |
| 3a4e0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3a500 | 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......51........`.......d.?.yA |
| 3a520 | 1f 00 00 00 03 03 04 00 52 74 6c 4e 75 6d 62 65 72 4f 66 43 6c 65 61 72 42 69 74 73 00 6e 74 64 | ........RtlNumberOfClearBits.ntd |
| 3a540 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 3a560 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 | 91..............0.......49...... |
| 3a580 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 04 03 04 00 52 74 6c 4e 75 6d 62 65 | ..`.......d.?.yA........RtlNumbe |
| 3a5a0 | 72 4f 66 53 65 74 42 69 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | rOfSetBits.ntdll.dll..ntdll.dll/ |
| 3a5c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3a5e0 | 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 | ......56........`.......d.?.yA$. |
| 3a600 | 00 00 05 03 04 00 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 00 | ......RtlOemStringToUnicodeSize. |
| 3a620 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 3a640 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 | 2991..............0.......58.... |
| 3a660 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 06 03 04 00 52 74 6c 4f 65 6d | ....`.......d.?.yA&.......RtlOem |
| 3a680 | 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | StringToUnicodeString.ntdll.dll. |
| 3a6a0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3a6c0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......47........`..... |
| 3a6e0 | 00 00 64 86 3f ac 79 41 1b 00 00 00 07 03 04 00 52 74 6c 4f 65 6d 54 6f 55 6e 69 63 6f 64 65 4e | ..d.?.yA........RtlOemToUnicodeN |
| 3a700 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 3a720 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 3a740 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 08 03 04 00 52 74 6c 4f | ......`.......d.?.yA........RtlO |
| 3a760 | 70 65 6e 43 75 72 72 65 6e 74 55 73 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | penCurrentUser.ntdll.dll..ntdll. |
| 3a780 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3a7a0 | 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......48........`.......d.?. |
| 3a7c0 | 79 41 1c 00 00 00 09 03 04 00 52 74 6c 50 63 54 6f 46 69 6c 65 48 65 61 64 65 72 00 6e 74 64 6c | yA........RtlPcToFileHeader.ntdl |
| 3a7e0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3a800 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 | ..............0.......52........ |
| 3a820 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 0a 03 04 00 52 74 6c 50 69 6e 41 74 6f 6d | `.......d.?.yA........RtlPinAtom |
| 3a840 | 49 6e 41 74 6f 6d 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | InAtomTable.ntdll.dll.ntdll.dll/ |
| 3a860 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3a880 | 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 | ......42........`.......d.?.yA.. |
| 3a8a0 | 00 00 0b 03 04 00 52 74 6c 50 6f 70 46 72 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ......RtlPopFrame.ntdll.dll.ntdl |
| 3a8c0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3a8e0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......46........`.......d. |
| 3a900 | 3f ac 79 41 1a 00 00 00 0c 03 04 00 52 74 6c 50 72 65 66 69 78 53 74 72 69 6e 67 00 6e 74 64 6c | ?.yA........RtlPrefixString.ntdl |
| 3a920 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3a940 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 3a960 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 0d 03 04 00 52 74 6c 50 72 65 66 69 78 55 | `.......d.?.yA!.......RtlPrefixU |
| 3a980 | 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | nicodeString.ntdll.dll..ntdll.dl |
| 3a9a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3a9c0 | 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......45........`.......d.?.yA |
| 3a9e0 | 19 00 00 00 0e 03 04 00 52 74 6c 50 72 6f 74 65 63 74 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c | ........RtlProtectHeap.ntdll.dll |
| 3aa00 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3aa20 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......43........`... |
| 3aa40 | ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 0f 03 04 00 52 74 6c 50 75 73 68 46 72 61 6d 65 00 6e | ....d.?.yA........RtlPushFrame.n |
| 3aa60 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 3aa80 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 | 2991..............0.......54.... |
| 3aaa0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 10 03 04 00 52 74 6c 51 75 65 | ....`.......d.?.yA".......RtlQue |
| 3aac0 | 72 79 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ryAtomInAtomTable.ntdll.dll.ntdl |
| 3aae0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3ab00 | 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......49........`.......d. |
| 3ab20 | 3f ac 79 41 1d 00 00 00 11 03 04 00 52 74 6c 51 75 65 72 79 44 65 70 74 68 53 4c 69 73 74 00 6e | ?.yA........RtlQueryDepthSList.n |
| 3ab40 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 3ab60 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 | 2991..............0.......60.... |
| 3ab80 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 12 03 04 00 52 74 6c 51 75 65 | ....`.......d.?.yA(.......RtlQue |
| 3aba0 | 72 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 5f 55 00 6e 74 64 6c 6c 2e 64 6c | ryEnvironmentVariable_U.ntdll.dl |
| 3abc0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3abe0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......54........`... |
| 3ac00 | ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 13 03 04 00 52 74 6c 51 75 65 72 79 48 65 61 70 49 6e | ....d.?.yA".......RtlQueryHeapIn |
| 3ac20 | 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | formation.ntdll.dll.ntdll.dll/.. |
| 3ac40 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3ac60 | 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 | ....53........`.......d.?.yA!... |
| 3ac80 | 14 03 04 00 52 74 6c 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 00 6e 74 64 6c 6c | ....RtlQueryInformationAcl.ntdll |
| 3aca0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3acc0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 37 20 20 20 20 20 20 20 20 | ..............0.......67........ |
| 3ace0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2f 00 00 00 15 03 04 00 52 74 6c 51 75 65 72 79 49 6e | `.......d.?.yA/.......RtlQueryIn |
| 3ad00 | 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 6e 74 64 6c 6c | formationActivationContext.ntdll |
| 3ad20 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3ad40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 33 20 20 20 20 20 20 20 20 | ..............0.......73........ |
| 3ad60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 35 00 00 00 16 03 04 00 52 74 6c 51 75 65 72 79 49 6e | `.......d.?.yA5.......RtlQueryIn |
| 3ad80 | 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 | formationActiveActivationContext |
| 3ada0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 3adc0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 | 492991..............0.......60.. |
| 3ade0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 17 03 04 00 52 74 6c 51 | ......`.......d.?.yA(.......RtlQ |
| 3ae00 | 75 65 72 79 49 6e 74 65 72 66 61 63 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 6e 74 64 6c 6c 2e | ueryInterfaceMemoryStream.ntdll. |
| 3ae20 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 3ae40 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a | ............0.......66........`. |
| 3ae60 | 00 00 ff ff 00 00 64 86 3f ac 79 41 2e 00 00 00 18 03 04 00 52 74 6c 51 75 65 72 79 50 72 6f 63 | ......d.?.yA........RtlQueryProc |
| 3ae80 | 65 73 73 42 61 63 6b 54 72 61 63 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c | essBackTraceInformation.ntdll.dl |
| 3aea0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3aec0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......62........`... |
| 3aee0 | ff ff 00 00 64 86 3f ac 79 41 2a 00 00 00 19 03 04 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 | ....d.?.yA*.......RtlQueryProces |
| 3af00 | 73 44 65 62 75 67 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | sDebugInformation.ntdll.dll.ntdl |
| 3af20 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3af40 | 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......61........`.......d. |
| 3af60 | 3f ac 79 41 29 00 00 00 1a 03 04 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 48 65 61 70 49 | ?.yA).......RtlQueryProcessHeapI |
| 3af80 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | nformation.ntdll.dll..ntdll.dll/ |
| 3afa0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3afc0 | 20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 | ......61........`.......d.?.yA). |
| 3afe0 | 00 00 1b 03 04 00 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 4c 6f 63 6b 49 6e 66 6f 72 6d 61 | ......RtlQueryProcessLockInforma |
| 3b000 | 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tion.ntdll.dll..ntdll.dll/...... |
| 3b020 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3b040 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 1c 03 04 00 | 53........`.......d.?.yA!....... |
| 3b060 | 52 74 6c 51 75 65 72 79 52 65 67 69 73 74 72 79 56 61 6c 75 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c | RtlQueryRegistryValues.ntdll.dll |
| 3b080 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3b0a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......53........`... |
| 3b0c0 | ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 1d 03 04 00 52 74 6c 51 75 65 72 79 53 65 63 75 72 69 | ....d.?.yA!.......RtlQuerySecuri |
| 3b0e0 | 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | tyObject.ntdll.dll..ntdll.dll/.. |
| 3b100 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3b120 | 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 | ....46........`.......d.?.yA.... |
| 3b140 | 1e 03 04 00 52 74 6c 51 75 65 72 79 54 61 67 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ....RtlQueryTagHeap.ntdll.dll.nt |
| 3b160 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3b180 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......58........`....... |
| 3b1a0 | 64 86 3f ac 79 41 26 00 00 00 1f 03 04 00 52 74 6c 51 75 65 72 79 54 69 6d 65 5a 6f 6e 65 49 6e | d.?.yA&.......RtlQueryTimeZoneIn |
| 3b1c0 | 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | formation.ntdll.dll.ntdll.dll/.. |
| 3b1e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3b200 | 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 | ....53........`.......d.?.yA!... |
| 3b220 | 20 03 04 00 52 74 6c 51 75 65 75 65 41 70 63 57 6f 77 36 34 54 68 72 65 61 64 00 6e 74 64 6c 6c | ....RtlQueueApcWow64Thread.ntdll |
| 3b240 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3b260 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 | ..............0.......47........ |
| 3b280 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 21 03 04 00 52 74 6c 51 75 65 75 65 57 6f | `.......d.?.yA....!...RtlQueueWo |
| 3b2a0 | 72 6b 49 74 65 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | rkItem.ntdll.dll..ntdll.dll/.... |
| 3b2c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3b2e0 | 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 22 03 | ..48........`.......d.?.yA....". |
| 3b300 | 04 00 52 74 6c 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ..RtlRaiseException.ntdll.dll.nt |
| 3b320 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3b340 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......45........`....... |
| 3b360 | 64 86 3f ac 79 41 19 00 00 00 23 03 04 00 52 74 6c 52 61 69 73 65 53 74 61 74 75 73 00 6e 74 64 | d.?.yA....#...RtlRaiseStatus.ntd |
| 3b380 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 3b3a0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 | 91..............0.......40...... |
| 3b3c0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 24 03 04 00 52 74 6c 52 61 6e 64 6f | ..`.......d.?.yA....$...RtlRando |
| 3b3e0 | 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | m.ntdll.dll.ntdll.dll/......1098 |
| 3b400 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 | 492991..............0.......42.. |
| 3b420 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 25 03 04 00 52 74 6c 52 | ......`.......d.?.yA....%...RtlR |
| 3b440 | 61 6e 64 6f 6d 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | andomEx.ntdll.dll.ntdll.dll/.... |
| 3b460 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3b480 | 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 26 03 | ..48........`.......d.?.yA....&. |
| 3b4a0 | 04 00 52 74 6c 52 65 41 6c 6c 6f 63 61 74 65 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ..RtlReAllocateHeap.ntdll.dll.nt |
| 3b4c0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3b4e0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......50........`....... |
| 3b500 | 64 86 3f ac 79 41 1e 00 00 00 27 03 04 00 52 74 6c 52 65 61 64 4d 65 6d 6f 72 79 53 74 72 65 61 | d.?.yA....'...RtlReadMemoryStrea |
| 3b520 | 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | m.ntdll.dll.ntdll.dll/......1098 |
| 3b540 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20 | 492991..............0.......62.. |
| 3b560 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2a 00 00 00 28 03 04 00 52 74 6c 52 | ......`.......d.?.yA*...(...RtlR |
| 3b580 | 65 61 64 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 6e 74 64 6c | eadOutOfProcessMemoryStream.ntdl |
| 3b5a0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3b5c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 | ..............0.......49........ |
| 3b5e0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 29 03 04 00 52 74 6c 52 65 61 6c 50 72 65 | `.......d.?.yA....)...RtlRealPre |
| 3b600 | 64 65 63 65 73 73 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | decessor.ntdll.dll..ntdll.dll/.. |
| 3b620 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3b640 | 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 | ....47........`.......d.?.yA.... |
| 3b660 | 2a 03 04 00 52 74 6c 52 65 61 6c 53 75 63 63 65 73 73 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | *...RtlRealSuccessor.ntdll.dll.. |
| 3b680 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3b6a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......67........`..... |
| 3b6c0 | 00 00 64 86 3f ac 79 41 2f 00 00 00 2b 03 04 00 52 74 6c 52 65 67 69 73 74 65 72 53 65 63 75 72 | ..d.?.yA/...+...RtlRegisterSecur |
| 3b6e0 | 65 4d 65 6d 6f 72 79 43 61 63 68 65 43 61 6c 6c 62 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | eMemoryCacheCallback.ntdll.dll.. |
| 3b700 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3b720 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......46........`..... |
| 3b740 | 00 00 64 86 3f ac 79 41 1a 00 00 00 2c 03 04 00 52 74 6c 52 65 67 69 73 74 65 72 57 61 69 74 00 | ..d.?.yA....,...RtlRegisterWait. |
| 3b760 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 3b780 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 | 2991..............0.......58.... |
| 3b7a0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 2d 03 04 00 52 74 6c 52 65 6c | ....`.......d.?.yA&...-...RtlRel |
| 3b7c0 | 65 61 73 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | easeActivationContext.ntdll.dll. |
| 3b7e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3b800 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......53........`..... |
| 3b820 | 00 00 64 86 3f ac 79 41 21 00 00 00 2e 03 04 00 52 74 6c 52 65 6c 65 61 73 65 4d 65 6d 6f 72 79 | ..d.?.yA!.......RtlReleaseMemory |
| 3b840 | 53 74 72 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Stream.ntdll.dll..ntdll.dll/.... |
| 3b860 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3b880 | 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 2f 03 | ..48........`.......d.?.yA..../. |
| 3b8a0 | 04 00 52 74 6c 52 65 6c 65 61 73 65 50 65 62 4c 6f 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ..RtlReleasePebLock.ntdll.dll.nt |
| 3b8c0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3b8e0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......50........`....... |
| 3b900 | 64 86 3f ac 79 41 1e 00 00 00 30 03 04 00 52 74 6c 52 65 6c 65 61 73 65 50 72 69 76 69 6c 65 67 | d.?.yA....0...RtlReleasePrivileg |
| 3b920 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 3b940 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 | 492991..............0.......53.. |
| 3b960 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 31 03 04 00 52 74 6c 52 | ......`.......d.?.yA!...1...RtlR |
| 3b980 | 65 6c 65 61 73 65 52 65 6c 61 74 69 76 65 4e 61 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | eleaseRelativeName.ntdll.dll..nt |
| 3b9a0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3b9c0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......49........`....... |
| 3b9e0 | 64 86 3f ac 79 41 1d 00 00 00 32 03 04 00 52 74 6c 52 65 6c 65 61 73 65 52 65 73 6f 75 72 63 65 | d.?.yA....2...RtlReleaseResource |
| 3ba00 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 3ba20 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 | 492991..............0.......44.. |
| 3ba40 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 33 03 04 00 52 74 6c 52 | ......`.......d.?.yA....3...RtlR |
| 3ba60 | 65 6d 6f 74 65 43 61 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | emoteCall.ntdll.dll.ntdll.dll/.. |
| 3ba80 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3baa0 | 20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 | ....63........`.......d.?.yA+... |
| 3bac0 | 34 03 04 00 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e 75 65 48 61 6e | 4...RtlRemoveVectoredContinueHan |
| 3bae0 | 64 6c 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | dler.ntdll.dll..ntdll.dll/...... |
| 3bb00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3bb20 | 36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2c 00 00 00 35 03 04 00 | 64........`.......d.?.yA,...5... |
| 3bb40 | 52 74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 | RtlRemoveVectoredExceptionHandle |
| 3bb60 | 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | r.ntdll.dll.ntdll.dll/......1098 |
| 3bb80 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 | 492991..............0.......54.. |
| 3bba0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 36 03 04 00 52 74 6c 52 | ......`.......d.?.yA"...6...RtlR |
| 3bbc0 | 65 73 65 74 52 74 6c 54 72 61 6e 73 6c 61 74 69 6f 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | esetRtlTranslations.ntdll.dll.nt |
| 3bbe0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3bc00 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......48........`....... |
| 3bc20 | 64 86 3f ac 79 41 1c 00 00 00 37 03 04 00 52 74 6c 52 65 73 74 6f 72 65 43 6f 6e 74 65 78 74 00 | d.?.yA....7...RtlRestoreContext. |
| 3bc40 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 3bc60 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 | 2991..............0.......55.... |
| 3bc80 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 38 03 04 00 52 74 6c 52 65 73 | ....`.......d.?.yA#...8...RtlRes |
| 3bca0 | 74 6f 72 65 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | toreLastWin32Error.ntdll.dll..nt |
| 3bcc0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3bce0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......52........`....... |
| 3bd00 | 64 86 3f ac 79 41 20 00 00 00 39 03 04 00 52 74 6c 52 65 76 65 72 74 4d 65 6d 6f 72 79 53 74 72 | d.?.yA....9...RtlRevertMemoryStr |
| 3bd20 | 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eam.ntdll.dll.ntdll.dll/......10 |
| 3bd40 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 3bd60 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 3a 03 04 00 52 74 | ........`.......d.?.yA$...:...Rt |
| 3bd80 | 6c 52 75 6e 44 65 63 6f 64 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c | lRunDecodeUnicodeString.ntdll.dl |
| 3bda0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3bdc0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......56........`... |
| 3bde0 | ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 3b 03 04 00 52 74 6c 52 75 6e 45 6e 63 6f 64 65 55 6e | ....d.?.yA$...;...RtlRunEncodeUn |
| 3be00 | 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | icodeString.ntdll.dll.ntdll.dll/ |
| 3be20 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3be40 | 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 | ......56........`.......d.?.yA$. |
| 3be60 | 00 00 3c 03 04 00 52 74 6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 54 6f 54 69 6d 65 00 | ..<...RtlSecondsSince1970ToTime. |
| 3be80 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 3bea0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 | 2991..............0.......56.... |
| 3bec0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 3d 03 04 00 52 74 6c 53 65 63 | ....`.......d.?.yA$...=...RtlSec |
| 3bee0 | 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 54 6f 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ondsSince1980ToTime.ntdll.dll.nt |
| 3bf00 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3bf20 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......50........`....... |
| 3bf40 | 64 86 3f ac 79 41 1e 00 00 00 3e 03 04 00 52 74 6c 53 65 65 6b 4d 65 6d 6f 72 79 53 74 72 65 61 | d.?.yA....>...RtlSeekMemoryStrea |
| 3bf60 | 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | m.ntdll.dll.ntdll.dll/......1098 |
| 3bf80 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 | 492991..............0.......58.. |
| 3bfa0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 3f 03 04 00 52 74 6c 53 | ......`.......d.?.yA&...?...RtlS |
| 3bfc0 | 65 6c 66 52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 00 6e 74 64 6c 6c 2e 64 6c | elfRelativeToAbsoluteSD.ntdll.dl |
| 3bfe0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3c000 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......59........`... |
| 3c020 | ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 40 03 04 00 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 | ....d.?.yA'...@...RtlSelfRelativ |
| 3c040 | 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | eToAbsoluteSD2.ntdll.dll..ntdll. |
| 3c060 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3c080 | 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......44........`.......d.?. |
| 3c0a0 | 79 41 18 00 00 00 41 03 04 00 52 74 6c 53 65 74 41 6c 6c 42 69 74 73 00 6e 74 64 6c 6c 2e 64 6c | yA....A...RtlSetAllBits.ntdll.dl |
| 3c0c0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3c0e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......65........`... |
| 3c100 | ff ff 00 00 64 86 3f ac 79 41 2d 00 00 00 42 03 04 00 52 74 6c 53 65 74 41 74 74 72 69 62 75 74 | ....d.?.yA-...B...RtlSetAttribut |
| 3c120 | 65 73 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | esSecurityDescriptor.ntdll.dll.. |
| 3c140 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3c160 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......41........`..... |
| 3c180 | 00 00 64 86 3f ac 79 41 15 00 00 00 43 03 04 00 52 74 6c 53 65 74 42 69 74 73 00 6e 74 64 6c 6c | ..d.?.yA....C...RtlSetBits.ntdll |
| 3c1a0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3c1c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20 | ..............0.......62........ |
| 3c1e0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2a 00 00 00 44 03 04 00 52 74 6c 53 65 74 43 6f 6e 74 | `.......d.?.yA*...D...RtlSetCont |
| 3c200 | 72 6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | rolSecurityDescriptor.ntdll.dll. |
| 3c220 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3c240 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......61........`..... |
| 3c260 | 00 00 64 86 3f ac 79 41 29 00 00 00 45 03 04 00 52 74 6c 53 65 74 43 72 69 74 69 63 61 6c 53 65 | ..d.?.yA)...E...RtlSetCriticalSe |
| 3c280 | 63 74 69 6f 6e 53 70 69 6e 43 6f 75 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ctionSpinCount.ntdll.dll..ntdll. |
| 3c2a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3c2c0 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 3c2e0 | 79 41 23 00 00 00 46 03 04 00 52 74 6c 53 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 | yA#...F...RtlSetCurrentDirectory |
| 3c300 | 5f 55 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | _U.ntdll.dll..ntdll.dll/......10 |
| 3c320 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 | 98492991..............0.......55 |
| 3c340 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 47 03 04 00 52 74 | ........`.......d.?.yA#...G...Rt |
| 3c360 | 6c 53 65 74 43 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c | lSetCurrentEnvironment.ntdll.dll |
| 3c380 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3c3a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......59........`... |
| 3c3c0 | ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 48 03 04 00 52 74 6c 53 65 74 44 61 63 6c 53 65 63 75 | ....d.?.yA'...H...RtlSetDaclSecu |
| 3c3e0 | 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | rityDescriptor.ntdll.dll..ntdll. |
| 3c400 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3c420 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 3c440 | 79 41 23 00 00 00 49 03 04 00 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e | yA#...I...RtlSetEnvironmentStrin |
| 3c460 | 67 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | gs.ntdll.dll..ntdll.dll/......10 |
| 3c480 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 3c4a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 4a 03 04 00 52 74 | ........`.......d.?.yA$...J...Rt |
| 3c4c0 | 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 00 6e 74 64 6c 6c 2e 64 6c | lSetEnvironmentVariable.ntdll.dl |
| 3c4e0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3c500 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......60........`... |
| 3c520 | ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 4b 03 04 00 52 74 6c 53 65 74 47 72 6f 75 70 53 65 63 | ....d.?.yA(...K...RtlSetGroupSec |
| 3c540 | 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | urityDescriptor.ntdll.dll.ntdll. |
| 3c560 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3c580 | 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......52........`.......d.?. |
| 3c5a0 | 79 41 20 00 00 00 4c 03 04 00 52 74 6c 53 65 74 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 | yA....L...RtlSetHeapInformation. |
| 3c5c0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 3c5e0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 | 2991..............0.......51.... |
| 3c600 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 4d 03 04 00 52 74 6c 53 65 74 | ....`.......d.?.yA....M...RtlSet |
| 3c620 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | InformationAcl.ntdll.dll..ntdll. |
| 3c640 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3c660 | 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......57........`.......d.?. |
| 3c680 | 79 41 25 00 00 00 4e 03 04 00 52 74 6c 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 43 61 6c 6c | yA%...N...RtlSetIoCompletionCall |
| 3c6a0 | 62 61 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | back.ntdll.dll..ntdll.dll/...... |
| 3c6c0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3c6e0 | 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 4f 03 04 00 | 51........`.......d.?.yA....O... |
| 3c700 | 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | RtlSetLastWin32Error.ntdll.dll.. |
| 3c720 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3c740 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......74........`..... |
| 3c760 | 00 00 64 86 3f ac 79 41 36 00 00 00 50 03 04 00 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 | ..d.?.yA6...P...RtlSetLastWin32E |
| 3c780 | 72 72 6f 72 41 6e 64 4e 74 53 74 61 74 75 73 46 72 6f 6d 4e 74 53 74 61 74 75 73 00 6e 74 64 6c | rrorAndNtStatusFromNtStatus.ntdl |
| 3c7a0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3c7c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 3c7e0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 51 03 04 00 52 74 6c 53 65 74 4d 65 6d 6f | `.......d.?.yA!...Q...RtlSetMemo |
| 3c800 | 72 79 53 74 72 65 61 6d 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ryStreamSize.ntdll.dll..ntdll.dl |
| 3c820 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3c840 | 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......60........`.......d.?.yA |
| 3c860 | 28 00 00 00 52 03 04 00 52 74 6c 53 65 74 4f 77 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 63 72 | (...R...RtlSetOwnerSecurityDescr |
| 3c880 | 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | iptor.ntdll.dll.ntdll.dll/...... |
| 3c8a0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3c8c0 | 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 53 03 04 00 | 54........`.......d.?.yA"...S... |
| 3c8e0 | 52 74 6c 53 65 74 50 72 6f 63 65 73 73 49 73 43 72 69 74 69 63 61 6c 00 6e 74 64 6c 6c 2e 64 6c | RtlSetProcessIsCritical.ntdll.dl |
| 3c900 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3c920 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......59........`... |
| 3c940 | ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 54 03 04 00 52 74 6c 53 65 74 53 61 63 6c 53 65 63 75 | ....d.?.yA'...T...RtlSetSaclSecu |
| 3c960 | 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | rityDescriptor.ntdll.dll..ntdll. |
| 3c980 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3c9a0 | 20 20 30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......64........`.......d.?. |
| 3c9c0 | 79 41 2c 00 00 00 55 03 04 00 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 | yA,...U...RtlSetSecurityDescript |
| 3c9e0 | 6f 72 52 4d 43 6f 6e 74 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | orRMControl.ntdll.dll.ntdll.dll/ |
| 3ca00 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3ca20 | 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 | ......51........`.......d.?.yA.. |
| 3ca40 | 00 00 56 03 04 00 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c | ..V...RtlSetSecurityObject.ntdll |
| 3ca60 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3ca80 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 3caa0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 57 03 04 00 52 74 6c 53 65 74 53 65 63 75 | `.......d.?.yA!...W...RtlSetSecu |
| 3cac0 | 72 69 74 79 4f 62 6a 65 63 74 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | rityObjectEx.ntdll.dll..ntdll.dl |
| 3cae0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3cb00 | 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......52........`.......d.?.yA |
| 3cb20 | 20 00 00 00 58 03 04 00 52 74 6c 53 65 74 54 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 00 6e 74 | ....X...RtlSetThreadErrorMode.nt |
| 3cb40 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3cb60 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 3cb80 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 59 03 04 00 52 74 6c 53 65 74 54 68 | ..`.......d.?.yA!...Y...RtlSetTh |
| 3cba0 | 72 65 61 64 49 73 43 72 69 74 69 63 61 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | readIsCritical.ntdll.dll..ntdll. |
| 3cbc0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3cbe0 | 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......56........`.......d.?. |
| 3cc00 | 79 41 24 00 00 00 5a 03 04 00 52 74 6c 53 65 74 54 68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74 46 | yA$...Z...RtlSetThreadPoolStartF |
| 3cc20 | 75 6e 63 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | unc.ntdll.dll.ntdll.dll/......10 |
| 3cc40 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 3cc60 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 5b 03 04 00 52 74 | ........`.......d.?.yA$...[...Rt |
| 3cc80 | 6c 53 65 74 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c | lSetTimeZoneInformation.ntdll.dl |
| 3cca0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3ccc0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......42........`... |
| 3cce0 | ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 5c 03 04 00 52 74 6c 53 65 74 54 69 6d 65 72 00 6e 74 | ....d.?.yA....\...RtlSetTimer.nt |
| 3cd00 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3cd20 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20 | 91..............0.......61...... |
| 3cd40 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 5d 03 04 00 52 74 6c 53 65 74 55 6e | ..`.......d.?.yA)...]...RtlSetUn |
| 3cd60 | 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c | handledExceptionFilter.ntdll.dll |
| 3cd80 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3cda0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......52........`... |
| 3cdc0 | ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 5e 03 04 00 52 74 6c 53 65 74 55 6e 69 63 6f 64 65 43 | ....d.?.yA....^...RtlSetUnicodeC |
| 3cde0 | 61 6c 6c 6f 75 74 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | allouts.ntdll.dll.ntdll.dll/.... |
| 3ce00 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3ce20 | 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 5f 03 | ..50........`.......d.?.yA...._. |
| 3ce40 | 04 00 52 74 6c 53 65 74 55 73 65 72 46 6c 61 67 73 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..RtlSetUserFlagsHeap.ntdll.dll. |
| 3ce60 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3ce80 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 3cea0 | 00 00 64 86 3f ac 79 41 1e 00 00 00 60 03 04 00 52 74 6c 53 65 74 55 73 65 72 56 61 6c 75 65 48 | ..d.?.yA....`...RtlSetUserValueH |
| 3cec0 | 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eap.ntdll.dll.ntdll.dll/......10 |
| 3cee0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 | 98492991..............0.......42 |
| 3cf00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 61 03 04 00 52 74 | ........`.......d.?.yA....a...Rt |
| 3cf20 | 6c 53 69 7a 65 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | lSizeHeap.ntdll.dll.ntdll.dll/.. |
| 3cf40 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3cf60 | 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 | ....39........`.......d.?.yA.... |
| 3cf80 | 62 03 04 00 52 74 6c 53 70 6c 61 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | b...RtlSplay.ntdll.dll..ntdll.dl |
| 3cfa0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3cfc0 | 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......44........`.......d.?.yA |
| 3cfe0 | 18 00 00 00 63 03 04 00 52 74 6c 53 74 61 72 74 52 58 61 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ....c...RtlStartRXact.ntdll.dll. |
| 3d000 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3d020 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......50........`..... |
| 3d040 | 00 00 64 86 3f ac 79 41 1e 00 00 00 64 03 04 00 52 74 6c 53 74 61 74 4d 65 6d 6f 72 79 53 74 72 | ..d.?.yA....d...RtlStatMemoryStr |
| 3d060 | 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | eam.ntdll.dll.ntdll.dll/......10 |
| 3d080 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 | 98492991..............0.......48 |
| 3d0a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 65 03 04 00 52 74 | ........`.......d.?.yA....e...Rt |
| 3d0c0 | 6c 53 74 72 69 6e 67 46 72 6f 6d 47 55 49 44 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | lStringFromGUID.ntdll.dll.ntdll. |
| 3d0e0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3d100 | 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......54........`.......d.?. |
| 3d120 | 79 41 22 00 00 00 66 03 04 00 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79 43 6f 75 6e 74 53 69 | yA"...f...RtlSubAuthorityCountSi |
| 3d140 | 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | d.ntdll.dll.ntdll.dll/......1098 |
| 3d160 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 3d180 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 67 03 04 00 52 74 6c 53 | ......`.......d.?.yA....g...RtlS |
| 3d1a0 | 75 62 41 75 74 68 6f 72 69 74 79 53 69 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ubAuthoritySid.ntdll.dll..ntdll. |
| 3d1c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3d1e0 | 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......52........`.......d.?. |
| 3d200 | 79 41 20 00 00 00 68 03 04 00 52 74 6c 53 75 62 74 72 65 65 50 72 65 64 65 63 65 73 73 6f 72 00 | yA....h...RtlSubtreePredecessor. |
| 3d220 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 3d240 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 | 2991..............0.......50.... |
| 3d260 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 69 03 04 00 52 74 6c 53 75 62 | ....`.......d.?.yA....i...RtlSub |
| 3d280 | 74 72 65 65 53 75 63 63 65 73 73 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | treeSuccessor.ntdll.dll.ntdll.dl |
| 3d2a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3d2c0 | 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......55........`.......d.?.yA |
| 3d2e0 | 23 00 00 00 6a 03 04 00 52 74 6c 53 79 73 74 65 6d 54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69 6d 65 | #...j...RtlSystemTimeToLocalTime |
| 3d300 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 3d320 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 3d340 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 6b 03 04 00 52 74 6c 54 | ......`.......d.?.yA....k...RtlT |
| 3d360 | 69 6d 65 46 69 65 6c 64 73 54 6f 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | imeFieldsToTime.ntdll.dll.ntdll. |
| 3d380 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3d3a0 | 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......57........`.......d.?. |
| 3d3c0 | 79 41 25 00 00 00 6c 03 04 00 52 74 6c 54 69 6d 65 54 6f 45 6c 61 70 73 65 64 54 69 6d 65 46 69 | yA%...l...RtlTimeToElapsedTimeFi |
| 3d3e0 | 65 6c 64 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | elds.ntdll.dll..ntdll.dll/...... |
| 3d400 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3d420 | 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 6d 03 04 00 | 56........`.......d.?.yA$...m... |
| 3d440 | 52 74 6c 54 69 6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 00 6e 74 64 6c 6c 2e | RtlTimeToSecondsSince1970.ntdll. |
| 3d460 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 3d480 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a | ............0.......56........`. |
| 3d4a0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 6e 03 04 00 52 74 6c 54 69 6d 65 54 6f 53 65 63 | ......d.?.yA$...n...RtlTimeToSec |
| 3d4c0 | 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ondsSince1980.ntdll.dll.ntdll.dl |
| 3d4e0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3d500 | 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......50........`.......d.?.yA |
| 3d520 | 1e 00 00 00 6f 03 04 00 52 74 6c 54 69 6d 65 54 6f 54 69 6d 65 46 69 65 6c 64 73 00 6e 74 64 6c | ....o...RtlTimeToTimeFields.ntdl |
| 3d540 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3d560 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 | ..............0.......50........ |
| 3d580 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 70 03 04 00 52 74 6c 54 72 61 63 65 44 61 | `.......d.?.yA....p...RtlTraceDa |
| 3d5a0 | 74 61 62 61 73 65 41 64 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | tabaseAdd.ntdll.dll.ntdll.dll/.. |
| 3d5c0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3d5e0 | 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 | ....53........`.......d.?.yA!... |
| 3d600 | 71 03 04 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 43 72 65 61 74 65 00 6e 74 64 6c 6c | q...RtlTraceDatabaseCreate.ntdll |
| 3d620 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3d640 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 | ..............0.......54........ |
| 3d660 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 72 03 04 00 52 74 6c 54 72 61 63 65 44 61 | `.......d.?.yA"...r...RtlTraceDa |
| 3d680 | 74 61 62 61 73 65 44 65 73 74 72 6f 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | tabaseDestroy.ntdll.dll.ntdll.dl |
| 3d6a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3d6c0 | 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......56........`.......d.?.yA |
| 3d6e0 | 24 00 00 00 73 03 04 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 45 6e 75 6d 65 72 61 74 | $...s...RtlTraceDatabaseEnumerat |
| 3d700 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 3d720 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 | 492991..............0.......51.. |
| 3d740 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 74 03 04 00 52 74 6c 54 | ......`.......d.?.yA....t...RtlT |
| 3d760 | 72 61 63 65 44 61 74 61 62 61 73 65 46 69 6e 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | raceDatabaseFind.ntdll.dll..ntdl |
| 3d780 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3d7a0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......51........`.......d. |
| 3d7c0 | 3f ac 79 41 1f 00 00 00 75 03 04 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 4c 6f 63 6b | ?.yA....u...RtlTraceDatabaseLock |
| 3d7e0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 3d800 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 | 492991..............0.......53.. |
| 3d820 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 76 03 04 00 52 74 6c 54 | ......`.......d.?.yA!...v...RtlT |
| 3d840 | 72 61 63 65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | raceDatabaseUnlock.ntdll.dll..nt |
| 3d860 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3d880 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......55........`....... |
| 3d8a0 | 64 86 3f ac 79 41 23 00 00 00 77 03 04 00 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 56 61 | d.?.yA#...w...RtlTraceDatabaseVa |
| 3d8c0 | 6c 69 64 61 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | lidate.ntdll.dll..ntdll.dll/.... |
| 3d8e0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3d900 | 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 78 03 | ..57........`.......d.?.yA%...x. |
| 3d920 | 04 00 52 74 6c 54 72 79 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 6e 74 64 | ..RtlTryEnterCriticalSection.ntd |
| 3d940 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 3d960 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 | 91..............0.......58...... |
| 3d980 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 79 03 04 00 52 74 6c 55 6e 68 61 6e | ..`.......d.?.yA&...y...RtlUnhan |
| 3d9a0 | 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | dledExceptionFilter.ntdll.dll.nt |
| 3d9c0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3d9e0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......59........`....... |
| 3da00 | 64 86 3f ac 79 41 27 00 00 00 7a 03 04 00 52 74 6c 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 | d.?.yA'...z...RtlUnhandledExcept |
| 3da20 | 69 6f 6e 46 69 6c 74 65 72 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ionFilter2.ntdll.dll..ntdll.dll/ |
| 3da40 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3da60 | 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 | ......57........`.......d.?.yA%. |
| 3da80 | 00 00 7b 03 04 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 | ..{...RtlUnicodeStringToAnsiSize |
| 3daa0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 3dac0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 | 492991..............0.......59.. |
| 3dae0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 7c 03 04 00 52 74 6c 55 | ......`.......d.?.yA'...|...RtlU |
| 3db00 | 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 | nicodeStringToAnsiString.ntdll.d |
| 3db20 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 3db40 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 35 20 20 20 20 20 20 20 20 60 0a | ............0.......65........`. |
| 3db60 | 00 00 ff ff 00 00 64 86 3f ac 79 41 2d 00 00 00 7d 03 04 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 | ......d.?.yA-...}...RtlUnicodeSt |
| 3db80 | 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c | ringToCountedOemString.ntdll.dll |
| 3dba0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3dbc0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......56........`... |
| 3dbe0 | ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 7e 03 04 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 | ....d.?.yA$...~...RtlUnicodeStri |
| 3dc00 | 6e 67 54 6f 49 6e 74 65 67 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ngToInteger.ntdll.dll.ntdll.dll/ |
| 3dc20 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3dc40 | 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 | ......56........`.......d.?.yA$. |
| 3dc60 | 00 00 7f 03 04 00 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 69 7a 65 00 | ......RtlUnicodeStringToOemSize. |
| 3dc80 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 3dca0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 | 2991..............0.......58.... |
| 3dcc0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 80 03 04 00 52 74 6c 55 6e 69 | ....`.......d.?.yA&.......RtlUni |
| 3dce0 | 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | codeStringToOemString.ntdll.dll. |
| 3dd00 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3dd20 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 3dd40 | 00 00 64 86 3f ac 79 41 20 00 00 00 81 03 04 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 43 75 73 74 | ..d.?.yA........RtlUnicodeToCust |
| 3dd60 | 6f 6d 43 50 4e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | omCPN.ntdll.dll.ntdll.dll/...... |
| 3dd80 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3dda0 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 82 03 04 00 | 53........`.......d.?.yA!....... |
| 3ddc0 | 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 4e 00 6e 74 64 6c 6c 2e 64 6c 6c | RtlUnicodeToMultiByteN.ntdll.dll |
| 3dde0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3de00 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......56........`... |
| 3de20 | ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 83 03 04 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 | ....d.?.yA$.......RtlUnicodeToMu |
| 3de40 | 6c 74 69 42 79 74 65 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ltiByteSize.ntdll.dll.ntdll.dll/ |
| 3de60 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3de80 | 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 | ......47........`.......d.?.yA.. |
| 3dea0 | 00 00 84 03 04 00 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e 00 6e 74 64 6c 6c 2e 64 6c 6c | ......RtlUnicodeToOemN.ntdll.dll |
| 3dec0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3dee0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......41........`... |
| 3df00 | ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 85 03 04 00 52 74 6c 55 6e 69 66 6f 72 6d 00 6e 74 64 | ....d.?.yA........RtlUniform.ntd |
| 3df20 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 3df40 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 | 91..............0.......54...... |
| 3df60 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 86 03 04 00 52 74 6c 55 6e 6c 6f 63 | ..`.......d.?.yA".......RtlUnloc |
| 3df80 | 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | kBootStatusData.ntdll.dll.ntdll. |
| 3dfa0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3dfc0 | 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......44........`.......d.?. |
| 3dfe0 | 79 41 18 00 00 00 87 03 04 00 52 74 6c 55 6e 6c 6f 63 6b 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c | yA........RtlUnlockHeap.ntdll.dl |
| 3e000 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3e020 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......58........`... |
| 3e040 | ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 88 03 04 00 52 74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f 72 | ....d.?.yA&.......RtlUnlockMemor |
| 3e060 | 79 53 74 72 65 61 6d 52 65 67 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | yStreamRegion.ntdll.dll.ntdll.dl |
| 3e080 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3e0a0 | 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......40........`.......d.?.yA |
| 3e0c0 | 14 00 00 00 89 03 04 00 52 74 6c 55 6e 77 69 6e 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ........RtlUnwind.ntdll.dll.ntdl |
| 3e0e0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3e100 | 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......42........`.......d. |
| 3e120 | 3f ac 79 41 16 00 00 00 8a 03 04 00 52 74 6c 55 6e 77 69 6e 64 45 78 00 6e 74 64 6c 6c 2e 64 6c | ?.yA........RtlUnwindEx.ntdll.dl |
| 3e140 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3e160 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......51........`... |
| 3e180 | ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 8b 03 04 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f | ....d.?.yA........RtlUpcaseUnico |
| 3e1a0 | 64 65 43 68 61 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | deChar.ntdll.dll..ntdll.dll/.... |
| 3e1c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3e1e0 | 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 8c 03 | ..53........`.......d.?.yA!..... |
| 3e200 | 04 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 | ..RtlUpcaseUnicodeString.ntdll.d |
| 3e220 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 3e240 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 35 20 20 20 20 20 20 20 20 60 0a | ............0.......65........`. |
| 3e260 | 00 00 ff ff 00 00 64 86 3f ac 79 41 2d 00 00 00 8d 03 04 00 52 74 6c 55 70 63 61 73 65 55 6e 69 | ......d.?.yA-.......RtlUpcaseUni |
| 3e280 | 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c | codeStringToAnsiString.ntdll.dll |
| 3e2a0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3e2c0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 37 31 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......71........`... |
| 3e2e0 | ff ff 00 00 64 86 3f ac 79 41 33 00 00 00 8e 03 04 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f | ....d.?.yA3.......RtlUpcaseUnico |
| 3e300 | 64 65 53 74 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 00 6e 74 64 6c 6c | deStringToCountedOemString.ntdll |
| 3e320 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3e340 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20 | ..............0.......64........ |
| 3e360 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2c 00 00 00 8f 03 04 00 52 74 6c 55 70 63 61 73 65 55 | `.......d.?.yA,.......RtlUpcaseU |
| 3e380 | 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c | nicodeStringToOemString.ntdll.dl |
| 3e3a0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3e3c0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......58........`... |
| 3e3e0 | ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 90 03 04 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f | ....d.?.yA&.......RtlUpcaseUnico |
| 3e400 | 64 65 54 6f 43 75 73 74 6f 6d 43 50 4e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | deToCustomCPN.ntdll.dll.ntdll.dl |
| 3e420 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3e440 | 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......59........`.......d.?.yA |
| 3e460 | 27 00 00 00 91 03 04 00 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 | '.......RtlUpcaseUnicodeToMultiB |
| 3e480 | 79 74 65 4e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | yteN.ntdll.dll..ntdll.dll/...... |
| 3e4a0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3e4c0 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 92 03 04 00 | 53........`.......d.?.yA!....... |
| 3e4e0 | 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e 00 6e 74 64 6c 6c 2e 64 6c 6c | RtlUpcaseUnicodeToOemN.ntdll.dll |
| 3e500 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3e520 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......45........`... |
| 3e540 | ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 93 03 04 00 52 74 6c 55 70 64 61 74 65 54 69 6d 65 72 | ....d.?.yA........RtlUpdateTimer |
| 3e560 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 3e580 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 | 492991..............0.......43.. |
| 3e5a0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 94 03 04 00 52 74 6c 55 | ......`.......d.?.yA........RtlU |
| 3e5c0 | 70 70 65 72 43 68 61 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | pperChar.ntdll.dll..ntdll.dll/.. |
| 3e5e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3e600 | 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 | ....45........`.......d.?.yA.... |
| 3e620 | 95 03 04 00 52 74 6c 55 70 70 65 72 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ....RtlUpperString.ntdll.dll..nt |
| 3e640 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3e660 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......43........`....... |
| 3e680 | 64 86 3f ac 79 41 17 00 00 00 96 03 04 00 52 74 6c 55 73 61 67 65 48 65 61 70 00 6e 74 64 6c 6c | d.?.yA........RtlUsageHeap.ntdll |
| 3e6a0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3e6c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 | ..............0.......42........ |
| 3e6e0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 97 03 04 00 52 74 6c 56 61 6c 69 64 41 63 | `.......d.?.yA........RtlValidAc |
| 3e700 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | l.ntdll.dll.ntdll.dll/......1098 |
| 3e720 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 35 20 20 | 492991..............0.......65.. |
| 3e740 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2d 00 00 00 98 03 04 00 52 74 6c 56 | ......`.......d.?.yA-.......RtlV |
| 3e760 | 61 6c 69 64 52 65 6c 61 74 69 76 65 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e | alidRelativeSecurityDescriptor.n |
| 3e780 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 3e7a0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 | 2991..............0.......57.... |
| 3e7c0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 99 03 04 00 52 74 6c 56 61 6c | ....`.......d.?.yA%.......RtlVal |
| 3e7e0 | 69 64 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | idSecurityDescriptor.ntdll.dll.. |
| 3e800 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3e820 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......42........`..... |
| 3e840 | 00 00 64 86 3f ac 79 41 16 00 00 00 9a 03 04 00 52 74 6c 56 61 6c 69 64 53 69 64 00 6e 74 64 6c | ..d.?.yA........RtlValidSid.ntdl |
| 3e860 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3e880 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 | ..............0.......46........ |
| 3e8a0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 9b 03 04 00 52 74 6c 56 61 6c 69 64 61 74 | `.......d.?.yA........RtlValidat |
| 3e8c0 | 65 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eHeap.ntdll.dll.ntdll.dll/...... |
| 3e8e0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3e900 | 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 9c 03 04 00 | 54........`.......d.?.yA"....... |
| 3e920 | 52 74 6c 56 61 6c 69 64 61 74 65 50 72 6f 63 65 73 73 48 65 61 70 73 00 6e 74 64 6c 6c 2e 64 6c | RtlValidateProcessHeaps.ntdll.dl |
| 3e940 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3e960 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......55........`... |
| 3e980 | ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 9d 03 04 00 52 74 6c 56 61 6c 69 64 61 74 65 55 6e 69 | ....d.?.yA#.......RtlValidateUni |
| 3e9a0 | 63 6f 64 65 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | codeString.ntdll.dll..ntdll.dll/ |
| 3e9c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3e9e0 | 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 | ......51........`.......d.?.yA.. |
| 3ea00 | 00 00 9e 03 04 00 52 74 6c 56 65 72 69 66 79 56 65 72 73 69 6f 6e 49 6e 66 6f 00 6e 74 64 6c 6c | ......RtlVerifyVersionInfo.ntdll |
| 3ea20 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3ea40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 | ..............0.......47........ |
| 3ea60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 9f 03 04 00 52 74 6c 56 69 72 74 75 61 6c | `.......d.?.yA........RtlVirtual |
| 3ea80 | 55 6e 77 69 6e 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Unwind.ntdll.dll..ntdll.dll/.... |
| 3eaa0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3eac0 | 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 a0 03 | ..48........`.......d.?.yA...... |
| 3eae0 | 04 00 52 74 6c 57 61 6c 6b 46 72 61 6d 65 43 68 61 69 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ..RtlWalkFrameChain.ntdll.dll.nt |
| 3eb00 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3eb20 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......42........`....... |
| 3eb40 | 64 86 3f ac 79 41 16 00 00 00 a1 03 04 00 52 74 6c 57 61 6c 6b 48 65 61 70 00 6e 74 64 6c 6c 2e | d.?.yA........RtlWalkHeap.ntdll. |
| 3eb60 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 3eb80 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a | ............0.......58........`. |
| 3eba0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 a2 03 04 00 52 74 6c 57 6f 77 36 34 45 6e 61 62 | ......d.?.yA&.......RtlWow64Enab |
| 3ebc0 | 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | leFsRedirection.ntdll.dll.ntdll. |
| 3ebe0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3ec00 | 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......60........`.......d.?. |
| 3ec20 | 79 41 28 00 00 00 a3 03 04 00 52 74 6c 57 6f 77 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 | yA(.......RtlWow64EnableFsRedire |
| 3ec40 | 63 74 69 6f 6e 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ctionEx.ntdll.dll.ntdll.dll/.... |
| 3ec60 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3ec80 | 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 a4 03 | ..51........`.......d.?.yA...... |
| 3eca0 | 04 00 52 74 6c 57 72 69 74 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 00 6e 74 64 6c 6c 2e 64 6c 6c | ..RtlWriteMemoryStream.ntdll.dll |
| 3ecc0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3ece0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......52........`... |
| 3ed00 | ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 a5 03 04 00 52 74 6c 57 72 69 74 65 52 65 67 69 73 74 | ....d.?.yA........RtlWriteRegist |
| 3ed20 | 72 79 56 61 6c 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ryValue.ntdll.dll.ntdll.dll/.... |
| 3ed40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3ed60 | 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 a6 03 | ..42........`.......d.?.yA...... |
| 3ed80 | 04 00 52 74 6c 5a 65 72 6f 48 65 61 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ..RtlZeroHeap.ntdll.dll.ntdll.dl |
| 3eda0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3edc0 | 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......44........`.......d.?.yA |
| 3ede0 | 18 00 00 00 a7 03 04 00 52 74 6c 5a 65 72 6f 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ........RtlZeroMemory.ntdll.dll. |
| 3ee00 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3ee20 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......58........`..... |
| 3ee40 | 00 00 64 86 3f ac 79 41 26 00 00 00 a8 03 04 00 52 74 6c 5a 6f 6d 62 69 66 79 41 63 74 69 76 61 | ..d.?.yA&.......RtlZombifyActiva |
| 3ee60 | 74 69 6f 6e 43 6f 6e 74 65 78 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | tionContext.ntdll.dll.ntdll.dll/ |
| 3ee80 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3eea0 | 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 | ......54........`.......d.?.yA". |
| 3eec0 | 00 00 a9 03 04 00 52 74 6c 70 41 70 70 6c 79 4c 65 6e 67 74 68 46 75 6e 63 74 69 6f 6e 00 6e 74 | ......RtlpApplyLengthFunction.nt |
| 3eee0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3ef00 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 | 91..............0.......51...... |
| 3ef20 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 aa 03 04 00 52 74 6c 70 45 6e 73 75 | ..`.......d.?.yA........RtlpEnsu |
| 3ef40 | 72 65 42 75 66 66 65 72 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | reBufferSize.ntdll.dll..ntdll.dl |
| 3ef60 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3ef80 | 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......58........`.......d.?.yA |
| 3efa0 | 26 00 00 00 ab 03 04 00 52 74 6c 70 4e 6f 74 4f 77 6e 65 72 43 72 69 74 69 63 61 6c 53 65 63 74 | &.......RtlpNotOwnerCriticalSect |
| 3efc0 | 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ion.ntdll.dll.ntdll.dll/......10 |
| 3efe0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 | 98492991..............0.......46 |
| 3f000 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 ac 03 04 00 52 74 | ........`.......d.?.yA........Rt |
| 3f020 | 6c 70 4e 74 43 72 65 61 74 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | lpNtCreateKey.ntdll.dll.ntdll.dl |
| 3f040 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3f060 | 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......52........`.......d.?.yA |
| 3f080 | 20 00 00 00 ad 03 04 00 52 74 6c 70 4e 74 45 6e 75 6d 65 72 61 74 65 53 75 62 4b 65 79 00 6e 74 | ........RtlpNtEnumerateSubKey.nt |
| 3f0a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3f0c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 3f0e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 ae 03 04 00 52 74 6c 70 4e 74 4d 61 | ..`.......d.?.yA!.......RtlpNtMa |
| 3f100 | 6b 65 54 65 6d 70 6f 72 61 72 79 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | keTemporaryKey.ntdll.dll..ntdll. |
| 3f120 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3f140 | 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......44........`.......d.?. |
| 3f160 | 79 41 18 00 00 00 af 03 04 00 52 74 6c 70 4e 74 4f 70 65 6e 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c | yA........RtlpNtOpenKey.ntdll.dl |
| 3f180 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3f1a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......50........`... |
| 3f1c0 | ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 b0 03 04 00 52 74 6c 70 4e 74 51 75 65 72 79 56 61 6c | ....d.?.yA........RtlpNtQueryVal |
| 3f1e0 | 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ueKey.ntdll.dll.ntdll.dll/...... |
| 3f200 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3f220 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 b1 03 04 00 | 48........`.......d.?.yA........ |
| 3f240 | 52 74 6c 70 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | RtlpNtSetValueKey.ntdll.dll.ntdl |
| 3f260 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3f280 | 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......56........`.......d. |
| 3f2a0 | 3f ac 79 41 24 00 00 00 b2 03 04 00 52 74 6c 70 55 6e 57 61 69 74 43 72 69 74 69 63 61 6c 53 65 | ?.yA$.......RtlpUnWaitCriticalSe |
| 3f2c0 | 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ction.ntdll.dll.ntdll.dll/...... |
| 3f2e0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 3f300 | 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 b3 03 04 00 | 57........`.......d.?.yA%....... |
| 3f320 | 52 74 6c 70 57 61 69 74 46 6f 72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c | RtlpWaitForCriticalSection.ntdll |
| 3f340 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 3f360 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 | ..............0.......58........ |
| 3f380 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 b4 03 04 00 52 74 6c 78 41 6e 73 69 53 74 | `.......d.?.yA&.......RtlxAnsiSt |
| 3f3a0 | 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ringToUnicodeSize.ntdll.dll.ntdl |
| 3f3c0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3f3e0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......57........`.......d. |
| 3f400 | 3f ac 79 41 25 00 00 00 b5 03 04 00 52 74 6c 78 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f | ?.yA%.......RtlxOemStringToUnico |
| 3f420 | 64 65 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | deSize.ntdll.dll..ntdll.dll/.... |
| 3f440 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3f460 | 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 b6 03 | ..58........`.......d.?.yA&..... |
| 3f480 | 04 00 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 00 6e 74 | ..RtlxUnicodeStringToAnsiSize.nt |
| 3f4a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3f4c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 | 91..............0.......57...... |
| 3f4e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 b7 03 04 00 52 74 6c 78 55 6e 69 63 | ..`.......d.?.yA%.......RtlxUnic |
| 3f500 | 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 69 7a 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | odeStringToOemSize.ntdll.dll..nt |
| 3f520 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3f540 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......50........`....... |
| 3f560 | 64 86 3f ac 79 41 1e 00 00 00 b8 03 04 00 56 65 72 53 65 74 43 6f 6e 64 69 74 69 6f 6e 4d 61 73 | d.?.yA........VerSetConditionMas |
| 3f580 | 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | k.ntdll.dll.ntdll.dll/......1098 |
| 3f5a0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 3f5c0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 b9 03 04 00 5a 77 41 63 | ......`.......d.?.yA........ZwAc |
| 3f5e0 | 63 65 70 74 43 6f 6e 6e 65 63 74 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ceptConnectPort.ntdll.dll.ntdll. |
| 3f600 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3f620 | 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......44........`.......d.?. |
| 3f640 | 79 41 18 00 00 00 ba 03 04 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 00 6e 74 64 6c 6c 2e 64 6c | yA........ZwAccessCheck.ntdll.dl |
| 3f660 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 3f680 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......57........`... |
| 3f6a0 | ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 bb 03 04 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 41 | ....d.?.yA%.......ZwAccessCheckA |
| 3f6c0 | 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ndAuditAlarm.ntdll.dll..ntdll.dl |
| 3f6e0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 3f700 | 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......50........`.......d.?.yA |
| 3f720 | 1e 00 00 00 bc 03 04 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 00 6e 74 64 6c | ........ZwAccessCheckByType.ntdl |
| 3f740 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3f760 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20 | ..............0.......63........ |
| 3f780 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2b 00 00 00 bd 03 04 00 5a 77 41 63 63 65 73 73 43 68 | `.......d.?.yA+.......ZwAccessCh |
| 3f7a0 | 65 63 6b 42 79 54 79 70 65 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c | eckByTypeAndAuditAlarm.ntdll.dll |
| 3f7c0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 3f7e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......60........`... |
| 3f800 | ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 be 03 04 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 | ....d.?.yA(.......ZwAccessCheckB |
| 3f820 | 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | yTypeResultList.ntdll.dll.ntdll. |
| 3f840 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 3f860 | 20 20 30 20 20 20 20 20 20 20 37 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......73........`.......d.?. |
| 3f880 | 79 41 35 00 00 00 bf 03 04 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 | yA5.......ZwAccessCheckByTypeRes |
| 3f8a0 | 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ultListAndAuditAlarm.ntdll.dll.. |
| 3f8c0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 3f8e0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 38 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......81........`..... |
| 3f900 | 00 00 64 86 3f ac 79 41 3d 00 00 00 c0 03 04 00 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 | ..d.?.yA=.......ZwAccessCheckByT |
| 3f920 | 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 | ypeResultListAndAuditAlarmByHand |
| 3f940 | 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | le.ntdll.dll..ntdll.dll/......10 |
| 3f960 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 | 98492991..............0.......40 |
| 3f980 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 c1 03 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 3f9a0 | 41 64 64 41 74 6f 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | AddAtom.ntdll.dll.ntdll.dll/.... |
| 3f9c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3f9e0 | 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 c2 03 | ..45........`.......d.?.yA...... |
| 3fa00 | 04 00 5a 77 41 64 64 42 6f 6f 74 45 6e 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ..ZwAddBootEntry.ntdll.dll..ntdl |
| 3fa20 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3fa40 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 3fa60 | 3f ac 79 41 1b 00 00 00 c3 03 04 00 5a 77 41 64 64 44 72 69 76 65 72 45 6e 74 72 79 00 6e 74 64 | ?.yA........ZwAddDriverEntry.ntd |
| 3fa80 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 3faa0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 3fac0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 c4 03 04 00 5a 77 41 64 6a 75 73 74 | ..`.......d.?.yA........ZwAdjust |
| 3fae0 | 47 72 6f 75 70 73 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | GroupsToken.ntdll.dll.ntdll.dll/ |
| 3fb00 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3fb20 | 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 | ......54........`.......d.?.yA". |
| 3fb40 | 00 00 c5 03 04 00 5a 77 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 00 6e 74 | ......ZwAdjustPrivilegesToken.nt |
| 3fb60 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3fb80 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 3fba0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 c6 03 04 00 5a 77 41 6c 65 72 74 52 | ..`.......d.?.yA........ZwAlertR |
| 3fbc0 | 65 73 75 6d 65 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | esumeThread.ntdll.dll.ntdll.dll/ |
| 3fbe0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 3fc00 | 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 | ......44........`.......d.?.yA.. |
| 3fc20 | 00 00 c7 03 04 00 5a 77 41 6c 65 72 74 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ......ZwAlertThread.ntdll.dll.nt |
| 3fc40 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 3fc60 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......56........`....... |
| 3fc80 | 64 86 3f ac 79 41 24 00 00 00 c8 03 04 00 5a 77 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 | d.?.yA$.......ZwAllocateLocallyU |
| 3fca0 | 6e 69 71 75 65 49 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | niqueId.ntdll.dll.ntdll.dll/.... |
| 3fcc0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3fce0 | 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 c9 03 | ..58........`.......d.?.yA&..... |
| 3fd00 | 04 00 5a 77 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 6e 74 | ..ZwAllocateUserPhysicalPages.nt |
| 3fd20 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 3fd40 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 | 91..............0.......46...... |
| 3fd60 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 ca 03 04 00 5a 77 41 6c 6c 6f 63 61 | ..`.......d.?.yA........ZwAlloca |
| 3fd80 | 74 65 55 75 69 64 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | teUuids.ntdll.dll.ntdll.dll/.... |
| 3fda0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 3fdc0 | 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 cb 03 | ..54........`.......d.?.yA"..... |
| 3fde0 | 04 00 5a 77 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e | ..ZwAllocateVirtualMemory.ntdll. |
| 3fe00 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 3fe20 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a | ............0.......52........`. |
| 3fe40 | 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 cc 03 04 00 5a 77 41 70 70 68 65 6c 70 43 61 63 | ......d.?.yA........ZwApphelpCac |
| 3fe60 | 68 65 43 6f 6e 74 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | heControl.ntdll.dll.ntdll.dll/.. |
| 3fe80 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 3fea0 | 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 | ....54........`.......d.?.yA"... |
| 3fec0 | cd 03 04 00 5a 77 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 00 6e 74 64 6c | ....ZwAreMappedFilesTheSame.ntdl |
| 3fee0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 3ff00 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20 | ..............0.......57........ |
| 3ff20 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 ce 03 04 00 5a 77 41 73 73 69 67 6e 50 72 | `.......d.?.yA%.......ZwAssignPr |
| 3ff40 | 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ocessToJobObject.ntdll.dll..ntdl |
| 3ff60 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 3ff80 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 3ffa0 | 3f ac 79 41 1b 00 00 00 cf 03 04 00 5a 77 43 61 6c 6c 62 61 63 6b 52 65 74 75 72 6e 00 6e 74 64 | ?.yA........ZwCallbackReturn.ntd |
| 3ffc0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 3ffe0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 | 91..............0.......58...... |
| 40000 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 d0 03 04 00 5a 77 43 61 6e 63 65 6c | ..`.......d.?.yA&.......ZwCancel |
| 40020 | 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | DeviceWakeupRequest.ntdll.dll.nt |
| 40040 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 40060 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......45........`....... |
| 40080 | 64 86 3f ac 79 41 19 00 00 00 d1 03 04 00 5a 77 43 61 6e 63 65 6c 49 6f 46 69 6c 65 00 6e 74 64 | d.?.yA........ZwCancelIoFile.ntd |
| 400a0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 400c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 | 91..............0.......44...... |
| 400e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 d2 03 04 00 5a 77 43 61 6e 63 65 6c | ..`.......d.?.yA........ZwCancel |
| 40100 | 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Timer.ntdll.dll.ntdll.dll/...... |
| 40120 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 40140 | 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 d3 03 04 00 | 43........`.......d.?.yA........ |
| 40160 | 5a 77 43 6c 65 61 72 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ZwClearEvent.ntdll.dll..ntdll.dl |
| 40180 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 401a0 | 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......38........`.......d.?.yA |
| 401c0 | 12 00 00 00 d4 03 04 00 5a 77 43 6c 6f 73 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ........ZwClose.ntdll.dll.ntdll. |
| 401e0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 40200 | 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......54........`.......d.?. |
| 40220 | 79 41 22 00 00 00 d5 03 04 00 5a 77 43 6c 6f 73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 | yA".......ZwCloseObjectAuditAlar |
| 40240 | 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | m.ntdll.dll.ntdll.dll/......1098 |
| 40260 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 | 492991..............0.......44.. |
| 40280 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 d6 03 04 00 5a 77 43 6f | ......`.......d.?.yA........ZwCo |
| 402a0 | 6d 70 61 63 74 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | mpactKeys.ntdll.dll.ntdll.dll/.. |
| 402c0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 402e0 | 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 | ....46........`.......d.?.yA.... |
| 40300 | d7 03 04 00 5a 77 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ....ZwCompareTokens.ntdll.dll.nt |
| 40320 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 40340 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......52........`....... |
| 40360 | 64 86 3f ac 79 41 20 00 00 00 d8 03 04 00 5a 77 43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 | d.?.yA........ZwCompleteConnectP |
| 40380 | 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ort.ntdll.dll.ntdll.dll/......10 |
| 403a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 | 98492991..............0.......44 |
| 403c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 d9 03 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 403e0 | 43 6f 6d 70 72 65 73 73 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | CompressKey.ntdll.dll.ntdll.dll/ |
| 40400 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 40420 | 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 | ......44........`.......d.?.yA.. |
| 40440 | 00 00 da 03 04 00 5a 77 43 6f 6e 6e 65 63 74 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ......ZwConnectPort.ntdll.dll.nt |
| 40460 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 40480 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......41........`....... |
| 404a0 | 64 86 3f ac 79 41 15 00 00 00 db 03 04 00 5a 77 43 6f 6e 74 69 6e 75 65 00 6e 74 64 6c 6c 2e 64 | d.?.yA........ZwContinue.ntdll.d |
| 404c0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 404e0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a | ............0.......50........`. |
| 40500 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 dc 03 04 00 5a 77 43 72 65 61 74 65 44 65 62 75 | ......d.?.yA........ZwCreateDebu |
| 40520 | 67 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | gObject.ntdll.dll.ntdll.dll/.... |
| 40540 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 40560 | 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 dd 03 | ..54........`.......d.?.yA"..... |
| 40580 | 04 00 5a 77 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e | ..ZwCreateDirectoryObject.ntdll. |
| 405a0 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 405c0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a | ............0.......44........`. |
| 405e0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 de 03 04 00 5a 77 43 72 65 61 74 65 45 76 65 6e | ......d.?.yA........ZwCreateEven |
| 40600 | 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | t.ntdll.dll.ntdll.dll/......1098 |
| 40620 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 | 492991..............0.......48.. |
| 40640 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 df 03 04 00 5a 77 43 72 | ......`.......d.?.yA........ZwCr |
| 40660 | 65 61 74 65 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | eateEventPair.ntdll.dll.ntdll.dl |
| 40680 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 406a0 | 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......43........`.......d.?.yA |
| 406c0 | 17 00 00 00 e0 03 04 00 5a 77 43 72 65 61 74 65 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ........ZwCreateFile.ntdll.dll.. |
| 406e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 40700 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 40720 | 00 00 64 86 3f ac 79 41 1f 00 00 00 e1 03 04 00 5a 77 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 | ..d.?.yA........ZwCreateIoComple |
| 40740 | 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tion.ntdll.dll..ntdll.dll/...... |
| 40760 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 40780 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 e2 03 04 00 | 48........`.......d.?.yA........ |
| 407a0 | 5a 77 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ZwCreateJobObject.ntdll.dll.ntdl |
| 407c0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 407e0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......45........`.......d. |
| 40800 | 3f ac 79 41 19 00 00 00 e3 03 04 00 5a 77 43 72 65 61 74 65 4a 6f 62 53 65 74 00 6e 74 64 6c 6c | ?.yA........ZwCreateJobSet.ntdll |
| 40820 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 40840 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 | ..............0.......42........ |
| 40860 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 e4 03 04 00 5a 77 43 72 65 61 74 65 4b 65 | `.......d.?.yA........ZwCreateKe |
| 40880 | 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | y.ntdll.dll.ntdll.dll/......1098 |
| 408a0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 | 492991..............0.......49.. |
| 408c0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 e5 03 04 00 5a 77 43 72 | ......`.......d.?.yA........ZwCr |
| 408e0 | 65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | eateKeyedEvent.ntdll.dll..ntdll. |
| 40900 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 40920 | 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......51........`.......d.?. |
| 40940 | 79 41 1f 00 00 00 e6 03 04 00 5a 77 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 00 6e | yA........ZwCreateMailslotFile.n |
| 40960 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 40980 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 | 2991..............0.......45.... |
| 409a0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 e7 03 04 00 5a 77 43 72 65 61 | ....`.......d.?.yA........ZwCrea |
| 409c0 | 74 65 4d 75 74 61 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | teMutant.ntdll.dll..ntdll.dll/.. |
| 409e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 40a00 | 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 | ....52........`.......d.?.yA.... |
| 40a20 | e8 03 04 00 5a 77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 00 6e 74 64 6c 6c 2e | ....ZwCreateNamedPipeFile.ntdll. |
| 40a40 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 40a60 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a | ............0.......49........`. |
| 40a80 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 e9 03 04 00 5a 77 43 72 65 61 74 65 50 61 67 69 | ......d.?.yA........ZwCreatePagi |
| 40aa0 | 6e 67 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ngFile.ntdll.dll..ntdll.dll/.... |
| 40ac0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 40ae0 | 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 ea 03 | ..43........`.......d.?.yA...... |
| 40b00 | 04 00 5a 77 43 72 65 61 74 65 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ..ZwCreatePort.ntdll.dll..ntdll. |
| 40b20 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 40b40 | 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......46........`.......d.?. |
| 40b60 | 79 41 1a 00 00 00 eb 03 04 00 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e | yA........ZwCreateProcess.ntdll. |
| 40b80 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 40ba0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a | ............0.......48........`. |
| 40bc0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 ec 03 04 00 5a 77 43 72 65 61 74 65 50 72 6f 63 | ......d.?.yA........ZwCreateProc |
| 40be0 | 65 73 73 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | essEx.ntdll.dll.ntdll.dll/...... |
| 40c00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 40c20 | 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 ed 03 04 00 | 46........`.......d.?.yA........ |
| 40c40 | 5a 77 43 72 65 61 74 65 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ZwCreateProfile.ntdll.dll.ntdll. |
| 40c60 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 40c80 | 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......46........`.......d.?. |
| 40ca0 | 79 41 1a 00 00 00 ee 03 04 00 5a 77 43 72 65 61 74 65 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e | yA........ZwCreateSection.ntdll. |
| 40cc0 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 40ce0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a | ............0.......48........`. |
| 40d00 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 ef 03 04 00 5a 77 43 72 65 61 74 65 53 65 6d 61 | ......d.?.yA........ZwCreateSema |
| 40d20 | 70 68 6f 72 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | phore.ntdll.dll.ntdll.dll/...... |
| 40d40 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 40d60 | 35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 f0 03 04 00 | 57........`.......d.?.yA%....... |
| 40d80 | 5a 77 43 72 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 6e 74 64 6c 6c | ZwCreateSymbolicLinkObject.ntdll |
| 40da0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 40dc0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 | ..............0.......45........ |
| 40de0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 f1 03 04 00 5a 77 43 72 65 61 74 65 54 68 | `.......d.?.yA........ZwCreateTh |
| 40e00 | 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | read.ntdll.dll..ntdll.dll/...... |
| 40e20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 40e40 | 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 f2 03 04 00 | 44........`.......d.?.yA........ |
| 40e60 | 5a 77 43 72 65 61 74 65 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ZwCreateTimer.ntdll.dll.ntdll.dl |
| 40e80 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 40ea0 | 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......44........`.......d.?.yA |
| 40ec0 | 18 00 00 00 f3 03 04 00 5a 77 43 72 65 61 74 65 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ........ZwCreateToken.ntdll.dll. |
| 40ee0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 40f00 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 40f20 | 00 00 64 86 3f ac 79 41 1f 00 00 00 f4 03 04 00 5a 77 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 | ..d.?.yA........ZwCreateWaitable |
| 40f40 | 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Port.ntdll.dll..ntdll.dll/...... |
| 40f60 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 40f80 | 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 f5 03 04 00 | 51........`.......d.?.yA........ |
| 40fa0 | 5a 77 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ZwDebugActiveProcess.ntdll.dll.. |
| 40fc0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 40fe0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......46........`..... |
| 41000 | 00 00 64 86 3f ac 79 41 1a 00 00 00 f6 03 04 00 5a 77 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 00 | ..d.?.yA........ZwDebugContinue. |
| 41020 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 41040 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 | 2991..............0.......47.... |
| 41060 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 f7 03 04 00 5a 77 44 65 6c 61 | ....`.......d.?.yA........ZwDela |
| 41080 | 79 45 78 65 63 75 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | yExecution.ntdll.dll..ntdll.dll/ |
| 410a0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 410c0 | 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 | ......43........`.......d.?.yA.. |
| 410e0 | 00 00 f8 03 04 00 5a 77 44 65 6c 65 74 65 41 74 6f 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ......ZwDeleteAtom.ntdll.dll..nt |
| 41100 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 41120 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......48........`....... |
| 41140 | 64 86 3f ac 79 41 1c 00 00 00 f9 03 04 00 5a 77 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 00 | d.?.yA........ZwDeleteBootEntry. |
| 41160 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 41180 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 | 2991..............0.......50.... |
| 411a0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 fa 03 04 00 5a 77 44 65 6c 65 | ....`.......d.?.yA........ZwDele |
| 411c0 | 74 65 44 72 69 76 65 72 45 6e 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | teDriverEntry.ntdll.dll.ntdll.dl |
| 411e0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 41200 | 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......43........`.......d.?.yA |
| 41220 | 17 00 00 00 fb 03 04 00 5a 77 44 65 6c 65 74 65 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ........ZwDeleteFile.ntdll.dll.. |
| 41240 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 41260 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......42........`..... |
| 41280 | 00 00 64 86 3f ac 79 41 16 00 00 00 fc 03 04 00 5a 77 44 65 6c 65 74 65 4b 65 79 00 6e 74 64 6c | ..d.?.yA........ZwDeleteKey.ntdl |
| 412a0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 412c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 | ..............0.......55........ |
| 412e0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 fd 03 04 00 5a 77 44 65 6c 65 74 65 4f 62 | `.......d.?.yA#.......ZwDeleteOb |
| 41300 | 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | jectAuditAlarm.ntdll.dll..ntdll. |
| 41320 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 41340 | 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......47........`.......d.?. |
| 41360 | 79 41 1b 00 00 00 fe 03 04 00 5a 77 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c | yA........ZwDeleteValueKey.ntdll |
| 41380 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 413a0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 | ..............0.......52........ |
| 413c0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 ff 03 04 00 5a 77 44 65 76 69 63 65 49 6f | `.......d.?.yA........ZwDeviceIo |
| 413e0 | 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ControlFile.ntdll.dll.ntdll.dll/ |
| 41400 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 41420 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 41440 | 00 00 00 04 04 00 5a 77 44 69 73 70 6c 61 79 53 74 72 69 6e 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ......ZwDisplayString.ntdll.dll. |
| 41460 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 41480 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......48........`..... |
| 414a0 | 00 00 64 86 3f ac 79 41 1c 00 00 00 01 04 04 00 5a 77 44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 | ..d.?.yA........ZwDuplicateObjec |
| 414c0 | 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | t.ntdll.dll.ntdll.dll/......1098 |
| 414e0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 | 492991..............0.......47.. |
| 41500 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 02 04 04 00 5a 77 44 75 | ......`.......d.?.yA........ZwDu |
| 41520 | 70 6c 69 63 61 74 65 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | plicateToken.ntdll.dll..ntdll.dl |
| 41540 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 41560 | 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......53........`.......d.?.yA |
| 41580 | 21 00 00 00 03 04 04 00 5a 77 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65 73 00 6e | !.......ZwEnumerateBootEntries.n |
| 415a0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 415c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 | 2991..............0.......55.... |
| 415e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 04 04 04 00 5a 77 45 6e 75 6d | ....`.......d.?.yA#.......ZwEnum |
| 41600 | 65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | erateDriverEntries.ntdll.dll..nt |
| 41620 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 41640 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......45........`....... |
| 41660 | 64 86 3f ac 79 41 19 00 00 00 05 04 04 00 5a 77 45 6e 75 6d 65 72 61 74 65 4b 65 79 00 6e 74 64 | d.?.yA........ZwEnumerateKey.ntd |
| 41680 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 416a0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 37 20 20 20 20 20 20 | 91..............0.......67...... |
| 416c0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 2f 00 00 00 06 04 04 00 5a 77 45 6e 75 6d 65 72 | ..`.......d.?.yA/.......ZwEnumer |
| 416e0 | 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 00 6e 74 64 | ateSystemEnvironmentValuesEx.ntd |
| 41700 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 41720 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 41740 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 07 04 04 00 5a 77 45 6e 75 6d 65 72 | ..`.......d.?.yA........ZwEnumer |
| 41760 | 61 74 65 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ateValueKey.ntdll.dll.ntdll.dll/ |
| 41780 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 417a0 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 417c0 | 00 00 08 04 04 00 5a 77 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ......ZwExtendSection.ntdll.dll. |
| 417e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 41800 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......44........`..... |
| 41820 | 00 00 64 86 3f ac 79 41 18 00 00 00 09 04 04 00 5a 77 46 69 6c 74 65 72 54 6f 6b 65 6e 00 6e 74 | ..d.?.yA........ZwFilterToken.nt |
| 41840 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 41860 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 | 91..............0.......41...... |
| 41880 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 0a 04 04 00 5a 77 46 69 6e 64 41 74 | ..`.......d.?.yA........ZwFindAt |
| 418a0 | 6f 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | om.ntdll.dll..ntdll.dll/......10 |
| 418c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 | 98492991..............0.......49 |
| 418e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 0b 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 41900 | 46 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | FlushBuffersFile.ntdll.dll..ntdl |
| 41920 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 41940 | 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......54........`.......d. |
| 41960 | 3f ac 79 41 22 00 00 00 0c 04 04 00 5a 77 46 6c 75 73 68 49 6e 73 74 72 75 63 74 69 6f 6e 43 61 | ?.yA".......ZwFlushInstructionCa |
| 41980 | 63 68 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | che.ntdll.dll.ntdll.dll/......10 |
| 419a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 | 98492991..............0.......41 |
| 419c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 0d 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 419e0 | 46 6c 75 73 68 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | FlushKey.ntdll.dll..ntdll.dll/.. |
| 41a00 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 41a20 | 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 | ....51........`.......d.?.yA.... |
| 41a40 | 0e 04 04 00 5a 77 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 | ....ZwFlushVirtualMemory.ntdll.d |
| 41a60 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 41a80 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a | ............0.......49........`. |
| 41aa0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 0f 04 04 00 5a 77 46 6c 75 73 68 57 72 69 74 65 | ......d.?.yA........ZwFlushWrite |
| 41ac0 | 42 75 66 66 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Buffer.ntdll.dll..ntdll.dll/.... |
| 41ae0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 41b00 | 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 10 04 | ..54........`.......d.?.yA"..... |
| 41b20 | 04 00 5a 77 46 72 65 65 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 6e 74 64 6c 6c 2e | ..ZwFreeUserPhysicalPages.ntdll. |
| 41b40 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 41b60 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a | ............0.......50........`. |
| 41b80 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 11 04 04 00 5a 77 46 72 65 65 56 69 72 74 75 61 | ......d.?.yA........ZwFreeVirtua |
| 41ba0 | 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | lMemory.ntdll.dll.ntdll.dll/.... |
| 41bc0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 41be0 | 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 12 04 | ..46........`.......d.?.yA...... |
| 41c00 | 04 00 5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ..ZwFsControlFile.ntdll.dll.ntdl |
| 41c20 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 41c40 | 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......49........`.......d. |
| 41c60 | 3f ac 79 41 1d 00 00 00 13 04 04 00 5a 77 47 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 00 6e | ?.yA........ZwGetContextThread.n |
| 41c80 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 41ca0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 | 2991..............0.......58.... |
| 41cc0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 14 04 04 00 5a 77 47 65 74 43 | ....`.......d.?.yA&.......ZwGetC |
| 41ce0 | 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | urrentProcessorNumber.ntdll.dll. |
| 41d00 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 41d20 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 41d40 | 00 00 64 86 3f ac 79 41 20 00 00 00 15 04 04 00 5a 77 47 65 74 44 65 76 69 63 65 50 6f 77 65 72 | ..d.?.yA........ZwGetDevicePower |
| 41d60 | 53 74 61 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | State.ntdll.dll.ntdll.dll/...... |
| 41d80 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 41da0 | 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 16 04 04 00 | 49........`.......d.?.yA........ |
| 41dc0 | 5a 77 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ZwGetPlugPlayEvent.ntdll.dll..nt |
| 41de0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 41e00 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......46........`....... |
| 41e20 | 64 86 3f ac 79 41 1a 00 00 00 17 04 04 00 5a 77 47 65 74 57 72 69 74 65 57 61 74 63 68 00 6e 74 | d.?.yA........ZwGetWriteWatch.nt |
| 41e40 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 41e60 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 | 91..............0.......58...... |
| 41e80 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 18 04 04 00 5a 77 49 6d 70 65 72 73 | ..`.......d.?.yA&.......ZwImpers |
| 41ea0 | 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | onateAnonymousToken.ntdll.dll.nt |
| 41ec0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 41ee0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......56........`....... |
| 41f00 | 64 86 3f ac 79 41 24 00 00 00 19 04 04 00 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 6e | d.?.yA$.......ZwImpersonateClien |
| 41f20 | 74 4f 66 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | tOfPort.ntdll.dll.ntdll.dll/.... |
| 41f40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 41f60 | 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 1a 04 | ..50........`.......d.?.yA...... |
| 41f80 | 04 00 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..ZwImpersonateThread.ntdll.dll. |
| 41fa0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 41fc0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 41fe0 | 00 00 64 86 3f ac 79 41 1f 00 00 00 1b 04 04 00 5a 77 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 | ..d.?.yA........ZwInitializeRegi |
| 42000 | 73 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | stry.ntdll.dll..ntdll.dll/...... |
| 42020 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 42040 | 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 1c 04 04 00 | 52........`.......d.?.yA........ |
| 42060 | 5a 77 49 6e 69 74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ZwInitiatePowerAction.ntdll.dll. |
| 42080 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 420a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......47........`..... |
| 420c0 | 00 00 64 86 3f ac 79 41 1b 00 00 00 1d 04 04 00 5a 77 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f 62 | ..d.?.yA........ZwIsProcessInJob |
| 420e0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 42100 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 | 492991..............0.......56.. |
| 42120 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 1e 04 04 00 5a 77 49 73 | ......`.......d.?.yA$.......ZwIs |
| 42140 | 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | SystemResumeAutomatic.ntdll.dll. |
| 42160 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 42180 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......43........`..... |
| 421a0 | 00 00 64 86 3f ac 79 41 17 00 00 00 1f 04 04 00 5a 77 4c 69 73 74 65 6e 50 6f 72 74 00 6e 74 64 | ..d.?.yA........ZwListenPort.ntd |
| 421c0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 421e0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 | 91..............0.......43...... |
| 42200 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 20 04 04 00 5a 77 4c 6f 61 64 44 72 | ..`.......d.?.yA........ZwLoadDr |
| 42220 | 69 76 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | iver.ntdll.dll..ntdll.dll/...... |
| 42240 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 42260 | 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 21 04 04 00 | 40........`.......d.?.yA....!... |
| 42280 | 5a 77 4c 6f 61 64 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ZwLoadKey.ntdll.dll.ntdll.dll/.. |
| 422a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 422c0 | 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 | ....41........`.......d.?.yA.... |
| 422e0 | 22 04 04 00 5a 77 4c 6f 61 64 4b 65 79 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | "...ZwLoadKey2.ntdll.dll..ntdll. |
| 42300 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 42320 | 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......42........`.......d.?. |
| 42340 | 79 41 16 00 00 00 23 04 04 00 5a 77 4c 6f 61 64 4b 65 79 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | yA....#...ZwLoadKeyEx.ntdll.dll. |
| 42360 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 42380 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......41........`..... |
| 423a0 | 00 00 64 86 3f ac 79 41 15 00 00 00 24 04 04 00 5a 77 4c 6f 63 6b 46 69 6c 65 00 6e 74 64 6c 6c | ..d.?.yA....$...ZwLockFile.ntdll |
| 423c0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 423e0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 | ..............0.......58........ |
| 42400 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 25 04 04 00 5a 77 4c 6f 63 6b 50 72 6f 64 | `.......d.?.yA&...%...ZwLockProd |
| 42420 | 75 63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | uctActivationKeys.ntdll.dll.ntdl |
| 42440 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 42460 | 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......48........`.......d. |
| 42480 | 3f ac 79 41 1c 00 00 00 26 04 04 00 5a 77 4c 6f 63 6b 52 65 67 69 73 74 72 79 4b 65 79 00 6e 74 | ?.yA....&...ZwLockRegistryKey.nt |
| 424a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 424c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 424e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 27 04 04 00 5a 77 4c 6f 63 6b 56 69 | ..`.......d.?.yA....'...ZwLockVi |
| 42500 | 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | rtualMemory.ntdll.dll.ntdll.dll/ |
| 42520 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 42540 | 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 | ......52........`.......d.?.yA.. |
| 42560 | 00 00 28 04 04 00 5a 77 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 74 00 6e 74 64 6c | ..(...ZwMakePermanentObject.ntdl |
| 42580 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 425a0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 | ..............0.......52........ |
| 425c0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 29 04 04 00 5a 77 4d 61 6b 65 54 65 6d 70 | `.......d.?.yA....)...ZwMakeTemp |
| 425e0 | 6f 72 61 72 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | oraryObject.ntdll.dll.ntdll.dll/ |
| 42600 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 42620 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 42640 | 00 00 2a 04 04 00 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 00 6e 74 64 | ..*...ZwMapUserPhysicalPages.ntd |
| 42660 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 42680 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 | 91..............0.......60...... |
| 426a0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 2b 04 04 00 5a 77 4d 61 70 55 73 65 | ..`.......d.?.yA(...+...ZwMapUse |
| 426c0 | 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | rPhysicalPagesScatter.ntdll.dll. |
| 426e0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 42700 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 42720 | 00 00 64 86 3f ac 79 41 1d 00 00 00 2c 04 04 00 5a 77 4d 61 70 56 69 65 77 4f 66 53 65 63 74 69 | ..d.?.yA....,...ZwMapViewOfSecti |
| 42740 | 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | on.ntdll.dll..ntdll.dll/......10 |
| 42760 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 | 98492991..............0.......48 |
| 42780 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 2d 04 04 00 5a 77 | ........`.......d.?.yA....-...Zw |
| 427a0 | 4d 6f 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ModifyBootEntry.ntdll.dll.ntdll. |
| 427c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 427e0 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 42800 | 79 41 1e 00 00 00 2e 04 04 00 5a 77 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72 79 00 6e 74 | yA........ZwModifyDriverEntry.nt |
| 42820 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 42840 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 | 91..............0.......58...... |
| 42860 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 2f 04 04 00 5a 77 4e 6f 74 69 66 79 | ..`.......d.?.yA&.../...ZwNotify |
| 42880 | 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ChangeDirectoryFile.ntdll.dll.nt |
| 428a0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 428c0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......48........`....... |
| 428e0 | 64 86 3f ac 79 41 1c 00 00 00 30 04 04 00 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b 65 79 00 | d.?.yA....0...ZwNotifyChangeKey. |
| 42900 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 42920 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 | 2991..............0.......57.... |
| 42940 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 31 04 04 00 5a 77 4e 6f 74 69 | ....`.......d.?.yA%...1...ZwNoti |
| 42960 | 66 79 43 68 61 6e 67 65 4d 75 6c 74 69 70 6c 65 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | fyChangeMultipleKeys.ntdll.dll.. |
| 42980 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 429a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......52........`..... |
| 429c0 | 00 00 64 86 3f ac 79 41 20 00 00 00 32 04 04 00 5a 77 4f 70 65 6e 44 69 72 65 63 74 6f 72 79 4f | ..d.?.yA....2...ZwOpenDirectoryO |
| 429e0 | 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | bject.ntdll.dll.ntdll.dll/...... |
| 42a00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 42a20 | 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 33 04 04 00 | 42........`.......d.?.yA....3... |
| 42a40 | 5a 77 4f 70 65 6e 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ZwOpenEvent.ntdll.dll.ntdll.dll/ |
| 42a60 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 42a80 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 42aa0 | 00 00 34 04 04 00 5a 77 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..4...ZwOpenEventPair.ntdll.dll. |
| 42ac0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 42ae0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......41........`..... |
| 42b00 | 00 00 64 86 3f ac 79 41 15 00 00 00 35 04 04 00 5a 77 4f 70 65 6e 46 69 6c 65 00 6e 74 64 6c 6c | ..d.?.yA....5...ZwOpenFile.ntdll |
| 42b20 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 42b40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 | ..............0.......49........ |
| 42b60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 36 04 04 00 5a 77 4f 70 65 6e 49 6f 43 6f | `.......d.?.yA....6...ZwOpenIoCo |
| 42b80 | 6d 70 6c 65 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | mpletion.ntdll.dll..ntdll.dll/.. |
| 42ba0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 42bc0 | 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 | ....46........`.......d.?.yA.... |
| 42be0 | 37 04 04 00 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | 7...ZwOpenJobObject.ntdll.dll.nt |
| 42c00 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 42c20 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......40........`....... |
| 42c40 | 64 86 3f ac 79 41 14 00 00 00 38 04 04 00 5a 77 4f 70 65 6e 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c | d.?.yA....8...ZwOpenKey.ntdll.dl |
| 42c60 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 42c80 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......47........`... |
| 42ca0 | ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 39 04 04 00 5a 77 4f 70 65 6e 4b 65 79 65 64 45 76 65 | ....d.?.yA....9...ZwOpenKeyedEve |
| 42cc0 | 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | nt.ntdll.dll..ntdll.dll/......10 |
| 42ce0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 | 98492991..............0.......43 |
| 42d00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 3a 04 04 00 5a 77 | ........`.......d.?.yA....:...Zw |
| 42d20 | 4f 70 65 6e 4d 75 74 61 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | OpenMutant.ntdll.dll..ntdll.dll/ |
| 42d40 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 42d60 | 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 | ......53........`.......d.?.yA!. |
| 42d80 | 00 00 3b 04 04 00 5a 77 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 | ..;...ZwOpenObjectAuditAlarm.ntd |
| 42da0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 42dc0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 | 91..............0.......44...... |
| 42de0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 3c 04 04 00 5a 77 4f 70 65 6e 50 72 | ..`.......d.?.yA....<...ZwOpenPr |
| 42e00 | 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ocess.ntdll.dll.ntdll.dll/...... |
| 42e20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 42e40 | 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 3d 04 04 00 | 49........`.......d.?.yA....=... |
| 42e60 | 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ZwOpenProcessToken.ntdll.dll..nt |
| 42e80 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 42ea0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 42ec0 | 64 86 3f ac 79 41 1f 00 00 00 3e 04 04 00 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e | d.?.yA....>...ZwOpenProcessToken |
| 42ee0 | 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | Ex.ntdll.dll..ntdll.dll/......10 |
| 42f00 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 | 98492991..............0.......44 |
| 42f20 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 3f 04 04 00 5a 77 | ........`.......d.?.yA....?...Zw |
| 42f40 | 4f 70 65 6e 53 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | OpenSection.ntdll.dll.ntdll.dll/ |
| 42f60 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 42f80 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 42fa0 | 00 00 40 04 04 00 5a 77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..@...ZwOpenSemaphore.ntdll.dll. |
| 42fc0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 42fe0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......55........`..... |
| 43000 | 00 00 64 86 3f ac 79 41 23 00 00 00 41 04 04 00 5a 77 4f 70 65 6e 53 79 6d 62 6f 6c 69 63 4c 69 | ..d.?.yA#...A...ZwOpenSymbolicLi |
| 43020 | 6e 6b 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | nkObject.ntdll.dll..ntdll.dll/.. |
| 43040 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 43060 | 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 | ....43........`.......d.?.yA.... |
| 43080 | 42 04 04 00 5a 77 4f 70 65 6e 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | B...ZwOpenThread.ntdll.dll..ntdl |
| 430a0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 430c0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......48........`.......d. |
| 430e0 | 3f ac 79 41 1c 00 00 00 43 04 04 00 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 00 6e 74 | ?.yA....C...ZwOpenThreadToken.nt |
| 43100 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 43120 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 43140 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 44 04 04 00 5a 77 4f 70 65 6e 54 68 | ..`.......d.?.yA....D...ZwOpenTh |
| 43160 | 72 65 61 64 54 6f 6b 65 6e 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | readTokenEx.ntdll.dll.ntdll.dll/ |
| 43180 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 431a0 | 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 | ......42........`.......d.?.yA.. |
| 431c0 | 00 00 45 04 04 00 5a 77 4f 70 65 6e 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ..E...ZwOpenTimer.ntdll.dll.ntdl |
| 431e0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 43200 | 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......48........`.......d. |
| 43220 | 3f ac 79 41 1c 00 00 00 46 04 04 00 5a 77 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c 00 6e 74 | ?.yA....F...ZwPlugPlayControl.nt |
| 43240 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 43260 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 | 91..............0.......49...... |
| 43280 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 47 04 04 00 5a 77 50 6f 77 65 72 49 | ..`.......d.?.yA....G...ZwPowerI |
| 432a0 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | nformation.ntdll.dll..ntdll.dll/ |
| 432c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 432e0 | 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 | ......47........`.......d.?.yA.. |
| 43300 | 00 00 48 04 04 00 5a 77 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 00 6e 74 64 6c 6c 2e 64 6c 6c | ..H...ZwPrivilegeCheck.ntdll.dll |
| 43320 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 43340 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......58........`... |
| 43360 | ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 49 04 04 00 5a 77 50 72 69 76 69 6c 65 67 65 4f 62 6a | ....d.?.yA&...I...ZwPrivilegeObj |
| 43380 | 65 63 74 41 75 64 69 74 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ectAuditAlarm.ntdll.dll.ntdll.dl |
| 433a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 433c0 | 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......60........`.......d.?.yA |
| 433e0 | 28 00 00 00 4a 04 04 00 5a 77 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 | (...J...ZwPrivilegedServiceAudit |
| 43400 | 41 6c 61 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Alarm.ntdll.dll.ntdll.dll/...... |
| 43420 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 43440 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 4b 04 04 00 | 53........`.......d.?.yA!...K... |
| 43460 | 5a 77 50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c | ZwProtectVirtualMemory.ntdll.dll |
| 43480 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 434a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......43........`... |
| 434c0 | ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 4c 04 04 00 5a 77 50 75 6c 73 65 45 76 65 6e 74 00 6e | ....d.?.yA....L...ZwPulseEvent.n |
| 434e0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 43500 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 | 2991..............0.......52.... |
| 43520 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 4d 04 04 00 5a 77 51 75 65 72 | ....`.......d.?.yA....M...ZwQuer |
| 43540 | 79 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | yAttributesFile.ntdll.dll.ntdll. |
| 43560 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 43580 | 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......52........`.......d.?. |
| 435a0 | 79 41 20 00 00 00 4e 04 04 00 5a 77 51 75 65 72 79 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 00 | yA....N...ZwQueryBootEntryOrder. |
| 435c0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 435e0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 | 2991..............0.......49.... |
| 43600 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 4f 04 04 00 5a 77 51 75 65 72 | ....`.......d.?.yA....O...ZwQuer |
| 43620 | 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | yBootOptions.ntdll.dll..ntdll.dl |
| 43640 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 43660 | 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......54........`.......d.?.yA |
| 43680 | 22 00 00 00 50 04 04 00 5a 77 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 | "...P...ZwQueryDebugFilterState. |
| 436a0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 436c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 | 2991..............0.......51.... |
| 436e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 51 04 04 00 5a 77 51 75 65 72 | ....`.......d.?.yA....Q...ZwQuer |
| 43700 | 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | yDefaultLocale.ntdll.dll..ntdll. |
| 43720 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 43740 | 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......55........`.......d.?. |
| 43760 | 79 41 23 00 00 00 52 04 04 00 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 | yA#...R...ZwQueryDefaultUILangua |
| 43780 | 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ge.ntdll.dll..ntdll.dll/......10 |
| 437a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 | 98492991..............0.......51 |
| 437c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 53 04 04 00 5a 77 | ........`.......d.?.yA....S...Zw |
| 437e0 | 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | QueryDirectoryFile.ntdll.dll..nt |
| 43800 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 43820 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......53........`....... |
| 43840 | 64 86 3f ac 79 41 21 00 00 00 54 04 04 00 5a 77 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f 62 | d.?.yA!...T...ZwQueryDirectoryOb |
| 43860 | 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ject.ntdll.dll..ntdll.dll/...... |
| 43880 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 438a0 | 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 55 04 04 00 | 54........`.......d.?.yA"...U... |
| 438c0 | 5a 77 51 75 65 72 79 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 6e 74 64 6c 6c 2e 64 6c | ZwQueryDriverEntryOrder.ntdll.dl |
| 438e0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 43900 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......44........`... |
| 43920 | ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 56 04 04 00 5a 77 51 75 65 72 79 45 61 46 69 6c 65 00 | ....d.?.yA....V...ZwQueryEaFile. |
| 43940 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 43960 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 | 2991..............0.......43.... |
| 43980 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 57 04 04 00 5a 77 51 75 65 72 | ....`.......d.?.yA....W...ZwQuer |
| 439a0 | 79 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | yEvent.ntdll.dll..ntdll.dll/.... |
| 439c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 439e0 | 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 58 04 | ..56........`.......d.?.yA$...X. |
| 43a00 | 04 00 5a 77 51 75 65 72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 00 6e 74 64 6c | ..ZwQueryFullAttributesFile.ntdl |
| 43a20 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 43a40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 | ..............0.......53........ |
| 43a60 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 59 04 04 00 5a 77 51 75 65 72 79 49 6e 66 | `.......d.?.yA!...Y...ZwQueryInf |
| 43a80 | 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ormationAtom.ntdll.dll..ntdll.dl |
| 43aa0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 43ac0 | 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......53........`.......d.?.yA |
| 43ae0 | 21 00 00 00 5a 04 04 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 6e | !...Z...ZwQueryInformationFile.n |
| 43b00 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 43b20 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 | 2991..............0.......58.... |
| 43b40 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 5b 04 04 00 5a 77 51 75 65 72 | ....`.......d.?.yA&...[...ZwQuer |
| 43b60 | 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | yInformationJobObject.ntdll.dll. |
| 43b80 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 43ba0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......53........`..... |
| 43bc0 | 00 00 64 86 3f ac 79 41 21 00 00 00 5c 04 04 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 | ..d.?.yA!...\...ZwQueryInformati |
| 43be0 | 6f 6e 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | onPort.ntdll.dll..ntdll.dll/.... |
| 43c00 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 43c20 | 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 5d 04 | ..56........`.......d.?.yA$...]. |
| 43c40 | 04 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 6e 74 64 6c | ..ZwQueryInformationProcess.ntdl |
| 43c60 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 43c80 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20 | ..............0.......55........ |
| 43ca0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 5e 04 04 00 5a 77 51 75 65 72 79 49 6e 66 | `.......d.?.yA#...^...ZwQueryInf |
| 43cc0 | 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ormationThread.ntdll.dll..ntdll. |
| 43ce0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 43d00 | 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......54........`.......d.?. |
| 43d20 | 79 41 22 00 00 00 5f 04 04 00 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 | yA"..._...ZwQueryInformationToke |
| 43d40 | 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | n.ntdll.dll.ntdll.dll/......1098 |
| 43d60 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20 | 492991..............0.......55.. |
| 43d80 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 60 04 04 00 5a 77 51 75 | ......`.......d.?.yA#...`...ZwQu |
| 43da0 | 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | eryInstallUILanguage.ntdll.dll.. |
| 43dc0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 43de0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......53........`..... |
| 43e00 | 00 00 64 86 3f ac 79 41 21 00 00 00 61 04 04 00 5a 77 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 | ..d.?.yA!...a...ZwQueryIntervalP |
| 43e20 | 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | rofile.ntdll.dll..ntdll.dll/.... |
| 43e40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 43e60 | 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 62 04 | ..50........`.......d.?.yA....b. |
| 43e80 | 04 00 5a 77 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ..ZwQueryIoCompletion.ntdll.dll. |
| 43ea0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 43ec0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......41........`..... |
| 43ee0 | 00 00 64 86 3f ac 79 41 15 00 00 00 63 04 04 00 5a 77 51 75 65 72 79 4b 65 79 00 6e 74 64 6c 6c | ..d.?.yA....c...ZwQueryKey.ntdll |
| 43f00 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 43f20 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 | ..............0.......54........ |
| 43f40 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 64 04 04 00 5a 77 51 75 65 72 79 4d 75 6c | `.......d.?.yA"...d...ZwQueryMul |
| 43f60 | 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | tipleValueKey.ntdll.dll.ntdll.dl |
| 43f80 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 43fa0 | 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......44........`.......d.?.yA |
| 43fc0 | 18 00 00 00 65 04 04 00 5a 77 51 75 65 72 79 4d 75 74 61 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ....e...ZwQueryMutant.ntdll.dll. |
| 43fe0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 44000 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......44........`..... |
| 44020 | 00 00 64 86 3f ac 79 41 18 00 00 00 66 04 04 00 5a 77 51 75 65 72 79 4f 62 6a 65 63 74 00 6e 74 | ..d.?.yA....f...ZwQueryObject.nt |
| 44040 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 44060 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 | 91..............0.......49...... |
| 44080 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 67 04 04 00 5a 77 51 75 65 72 79 4f | ..`.......d.?.yA....g...ZwQueryO |
| 440a0 | 70 65 6e 53 75 62 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | penSubKeys.ntdll.dll..ntdll.dll/ |
| 440c0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 440e0 | 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 | ......51........`.......d.?.yA.. |
| 44100 | 00 00 68 04 04 00 5a 77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 00 6e 74 64 6c 6c | ..h...ZwQueryOpenSubKeysEx.ntdll |
| 44120 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 44140 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 | ..............0.......56........ |
| 44160 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 69 04 04 00 5a 77 51 75 65 72 79 50 65 72 | `.......d.?.yA$...i...ZwQueryPer |
| 44180 | 66 6f 72 6d 61 6e 63 65 43 6f 75 6e 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | formanceCounter.ntdll.dll.ntdll. |
| 441a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 441c0 | 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......60........`.......d.?. |
| 441e0 | 79 41 28 00 00 00 6a 04 04 00 5a 77 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e | yA(...j...ZwQueryPortInformation |
| 44200 | 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Process.ntdll.dll.ntdll.dll/.... |
| 44220 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 44240 | 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 6b 04 | ..58........`.......d.?.yA&...k. |
| 44260 | 04 00 5a 77 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 6e 74 | ..ZwQueryQuotaInformationFile.nt |
| 44280 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 442a0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 | 91..............0.......45...... |
| 442c0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 6c 04 04 00 5a 77 51 75 65 72 79 53 | ..`.......d.?.yA....l...ZwQueryS |
| 442e0 | 65 63 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ection.ntdll.dll..ntdll.dll/.... |
| 44300 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 44320 | 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 6d 04 | ..52........`.......d.?.yA....m. |
| 44340 | 04 00 5a 77 51 75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c | ..ZwQuerySecurityObject.ntdll.dl |
| 44360 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 44380 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......47........`... |
| 443a0 | ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 6e 04 04 00 5a 77 51 75 65 72 79 53 65 6d 61 70 68 6f | ....d.?.yA....n...ZwQuerySemapho |
| 443c0 | 72 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | re.ntdll.dll..ntdll.dll/......10 |
| 443e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 | 98492991..............0.......56 |
| 44400 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 6f 04 04 00 5a 77 | ........`.......d.?.yA$...o...Zw |
| 44420 | 51 75 65 72 79 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c | QuerySymbolicLinkObject.ntdll.dl |
| 44440 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 44460 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......60........`... |
| 44480 | ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 70 04 04 00 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 | ....d.?.yA(...p...ZwQuerySystemE |
| 444a0 | 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | nvironmentValue.ntdll.dll.ntdll. |
| 444c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 444e0 | 20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......62........`.......d.?. |
| 44500 | 79 41 2a 00 00 00 71 04 04 00 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 | yA*...q...ZwQuerySystemEnvironme |
| 44520 | 6e 74 56 61 6c 75 65 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ntValueEx.ntdll.dll.ntdll.dll/.. |
| 44540 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 44560 | 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 | ....55........`.......d.?.yA#... |
| 44580 | 72 04 04 00 5a 77 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 | r...ZwQuerySystemInformation.ntd |
| 445a0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 445c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 | 91..............0.......48...... |
| 445e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 73 04 04 00 5a 77 51 75 65 72 79 53 | ..`.......d.?.yA....s...ZwQueryS |
| 44600 | 79 73 74 65 6d 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ystemTime.ntdll.dll.ntdll.dll/.. |
| 44620 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 44640 | 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 | ....43........`.......d.?.yA.... |
| 44660 | 74 04 04 00 5a 77 51 75 65 72 79 54 69 6d 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | t...ZwQueryTimer.ntdll.dll..ntdl |
| 44680 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 446a0 | 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......53........`.......d. |
| 446c0 | 3f ac 79 41 21 00 00 00 75 04 04 00 5a 77 51 75 65 72 79 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 | ?.yA!...u...ZwQueryTimerResoluti |
| 446e0 | 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | on.ntdll.dll..ntdll.dll/......10 |
| 44700 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 | 98492991..............0.......46 |
| 44720 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 76 04 04 00 5a 77 | ........`.......d.?.yA....v...Zw |
| 44740 | 51 75 65 72 79 56 61 6c 75 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | QueryValueKey.ntdll.dll.ntdll.dl |
| 44760 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 44780 | 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......51........`.......d.?.yA |
| 447a0 | 1f 00 00 00 77 04 04 00 5a 77 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 | ....w...ZwQueryVirtualMemory.ntd |
| 447c0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 447e0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20 | 91..............0.......59...... |
| 44800 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 27 00 00 00 78 04 04 00 5a 77 51 75 65 72 79 56 | ..`.......d.?.yA'...x...ZwQueryV |
| 44820 | 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | olumeInformationFile.ntdll.dll.. |
| 44840 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 44860 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......47........`..... |
| 44880 | 00 00 64 86 3f ac 79 41 1b 00 00 00 79 04 04 00 5a 77 51 75 65 75 65 41 70 63 54 68 72 65 61 64 | ..d.?.yA....y...ZwQueueApcThread |
| 448a0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 448c0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 | 492991..............0.......47.. |
| 448e0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 7a 04 04 00 5a 77 52 61 | ......`.......d.?.yA....z...ZwRa |
| 44900 | 69 73 65 45 78 63 65 70 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | iseException.ntdll.dll..ntdll.dl |
| 44920 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 44940 | 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......47........`.......d.?.yA |
| 44960 | 1b 00 00 00 7b 04 04 00 5a 77 52 61 69 73 65 48 61 72 64 45 72 72 6f 72 00 6e 74 64 6c 6c 2e 64 | ....{...ZwRaiseHardError.ntdll.d |
| 44980 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 449a0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a | ............0.......41........`. |
| 449c0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 7c 04 04 00 5a 77 52 65 61 64 46 69 6c 65 00 6e | ......d.?.yA....|...ZwReadFile.n |
| 449e0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 44a00 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 | 2991..............0.......48.... |
| 44a20 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 7d 04 04 00 5a 77 52 65 61 64 | ....`.......d.?.yA....}...ZwRead |
| 44a40 | 46 69 6c 65 53 63 61 74 74 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | FileScatter.ntdll.dll.ntdll.dll/ |
| 44a60 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 44a80 | 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 | ......48........`.......d.?.yA.. |
| 44aa0 | 00 00 7e 04 04 00 5a 77 52 65 61 64 52 65 71 75 65 73 74 44 61 74 61 00 6e 74 64 6c 6c 2e 64 6c | ..~...ZwReadRequestData.ntdll.dl |
| 44ac0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 44ae0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......50........`... |
| 44b00 | ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 7f 04 04 00 5a 77 52 65 61 64 56 69 72 74 75 61 6c 4d | ....d.?.yA........ZwReadVirtualM |
| 44b20 | 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | emory.ntdll.dll.ntdll.dll/...... |
| 44b40 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 44b60 | 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 80 04 04 00 | 60........`.......d.?.yA(....... |
| 44b80 | 5a 77 52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f 72 74 00 6e 74 | ZwRegisterThreadTerminatePort.nt |
| 44ba0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 44bc0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 44be0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 81 04 04 00 5a 77 52 65 6c 65 61 73 | ..`.......d.?.yA........ZwReleas |
| 44c00 | 65 4b 65 79 65 64 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | eKeyedEvent.ntdll.dll.ntdll.dll/ |
| 44c20 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 44c40 | 20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 | ......46........`.......d.?.yA.. |
| 44c60 | 00 00 82 04 04 00 5a 77 52 65 6c 65 61 73 65 4d 75 74 61 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ......ZwReleaseMutant.ntdll.dll. |
| 44c80 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 44ca0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......49........`..... |
| 44cc0 | 00 00 64 86 3f ac 79 41 1d 00 00 00 83 04 04 00 5a 77 52 65 6c 65 61 73 65 53 65 6d 61 70 68 6f | ..d.?.yA........ZwReleaseSemapho |
| 44ce0 | 72 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | re.ntdll.dll..ntdll.dll/......10 |
| 44d00 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 | 98492991..............0.......51 |
| 44d20 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 84 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 44d40 | 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | RemoveIoCompletion.ntdll.dll..nt |
| 44d60 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 44d80 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......51........`....... |
| 44da0 | 64 86 3f ac 79 41 1f 00 00 00 85 04 04 00 5a 77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 | d.?.yA........ZwRemoveProcessDeb |
| 44dc0 | 75 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ug.ntdll.dll..ntdll.dll/......10 |
| 44de0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 | 98492991..............0.......42 |
| 44e00 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 86 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 44e20 | 52 65 6e 61 6d 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | RenameKey.ntdll.dll.ntdll.dll/.. |
| 44e40 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 44e60 | 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 | ....43........`.......d.?.yA.... |
| 44e80 | 87 04 04 00 5a 77 52 65 70 6c 61 63 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ....ZwReplaceKey.ntdll.dll..ntdl |
| 44ea0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 44ec0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......42........`.......d. |
| 44ee0 | 3f ac 79 41 16 00 00 00 88 04 04 00 5a 77 52 65 70 6c 79 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c | ?.yA........ZwReplyPort.ntdll.dl |
| 44f00 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 44f20 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......53........`... |
| 44f40 | ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 89 04 04 00 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 | ....d.?.yA!.......ZwReplyWaitRec |
| 44f60 | 65 69 76 65 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | eivePort.ntdll.dll..ntdll.dll/.. |
| 44f80 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 44fa0 | 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 | ....55........`.......d.?.yA#... |
| 44fc0 | 8a 04 04 00 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78 00 6e 74 64 | ....ZwReplyWaitReceivePortEx.ntd |
| 44fe0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 45000 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 | 91..............0.......51...... |
| 45020 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 8b 04 04 00 5a 77 52 65 70 6c 79 57 | ..`.......d.?.yA........ZwReplyW |
| 45040 | 61 69 74 52 65 70 6c 79 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | aitReplyPort.ntdll.dll..ntdll.dl |
| 45060 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 45080 | 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......52........`.......d.?.yA |
| 450a0 | 20 00 00 00 8c 04 04 00 5a 77 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b 65 75 70 00 6e 74 | ........ZwRequestDeviceWakeup.nt |
| 450c0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 450e0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 | 91..............0.......44...... |
| 45100 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 8d 04 04 00 5a 77 52 65 71 75 65 73 | ..`.......d.?.yA........ZwReques |
| 45120 | 74 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tPort.ntdll.dll.ntdll.dll/...... |
| 45140 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 45160 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 8e 04 04 00 | 53........`.......d.?.yA!....... |
| 45180 | 5a 77 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c | ZwRequestWaitReplyPort.ntdll.dll |
| 451a0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 451c0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......53........`... |
| 451e0 | ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 8f 04 04 00 5a 77 52 65 71 75 65 73 74 57 61 6b 65 75 | ....d.?.yA!.......ZwRequestWakeu |
| 45200 | 70 4c 61 74 65 6e 63 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | pLatency.ntdll.dll..ntdll.dll/.. |
| 45220 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 45240 | 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 | ....43........`.......d.?.yA.... |
| 45260 | 90 04 04 00 5a 77 52 65 73 65 74 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ....ZwResetEvent.ntdll.dll..ntdl |
| 45280 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 452a0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......48........`.......d. |
| 452c0 | 3f ac 79 41 1c 00 00 00 91 04 04 00 5a 77 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68 00 6e 74 | ?.yA........ZwResetWriteWatch.nt |
| 452e0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 45300 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 | 91..............0.......43...... |
| 45320 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 92 04 04 00 5a 77 52 65 73 74 6f 72 | ..`.......d.?.yA........ZwRestor |
| 45340 | 65 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eKey.ntdll.dll..ntdll.dll/...... |
| 45360 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 45380 | 34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 93 04 04 00 | 46........`.......d.?.yA........ |
| 453a0 | 5a 77 52 65 73 75 6d 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ZwResumeProcess.ntdll.dll.ntdll. |
| 453c0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 453e0 | 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......45........`.......d.?. |
| 45400 | 79 41 19 00 00 00 94 04 04 00 5a 77 52 65 73 75 6d 65 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 | yA........ZwResumeThread.ntdll.d |
| 45420 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 45440 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a | ............0.......40........`. |
| 45460 | 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 95 04 04 00 5a 77 53 61 76 65 4b 65 79 00 6e 74 | ......d.?.yA........ZwSaveKey.nt |
| 45480 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 454a0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 | 91..............0.......42...... |
| 454c0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 96 04 04 00 5a 77 53 61 76 65 4b 65 | ..`.......d.?.yA........ZwSaveKe |
| 454e0 | 79 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | yEx.ntdll.dll.ntdll.dll/......10 |
| 45500 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 | 98492991..............0.......47 |
| 45520 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 97 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 45540 | 53 61 76 65 4d 65 72 67 65 64 4b 65 79 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | SaveMergedKeys.ntdll.dll..ntdll. |
| 45560 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 45580 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 455a0 | 79 41 1e 00 00 00 98 04 04 00 5a 77 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 74 00 6e 74 | yA........ZwSecureConnectPort.nt |
| 455c0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 455e0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 | 91..............0.......50...... |
| 45600 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 99 04 04 00 5a 77 53 65 74 42 6f 6f | ..`.......d.?.yA........ZwSetBoo |
| 45620 | 74 45 6e 74 72 79 4f 72 64 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | tEntryOrder.ntdll.dll.ntdll.dll/ |
| 45640 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 45660 | 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 | ......47........`.......d.?.yA.. |
| 45680 | 00 00 9a 04 04 00 5a 77 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 00 6e 74 64 6c 6c 2e 64 6c 6c | ......ZwSetBootOptions.ntdll.dll |
| 456a0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 456c0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......49........`... |
| 456e0 | ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 9b 04 04 00 5a 77 53 65 74 43 6f 6e 74 65 78 74 54 68 | ....d.?.yA........ZwSetContextTh |
| 45700 | 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | read.ntdll.dll..ntdll.dll/...... |
| 45720 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 45740 | 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 9c 04 04 00 | 52........`.......d.?.yA........ |
| 45760 | 5a 77 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ZwSetDebugFilterState.ntdll.dll. |
| 45780 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 457a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......56........`..... |
| 457c0 | 00 00 64 86 3f ac 79 41 24 00 00 00 9d 04 04 00 5a 77 53 65 74 44 65 66 61 75 6c 74 48 61 72 64 | ..d.?.yA$.......ZwSetDefaultHard |
| 457e0 | 45 72 72 6f 72 50 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ErrorPort.ntdll.dll.ntdll.dll/.. |
| 45800 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 45820 | 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 | ....49........`.......d.?.yA.... |
| 45840 | 9e 04 04 00 5a 77 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c | ....ZwSetDefaultLocale.ntdll.dll |
| 45860 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 45880 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......53........`... |
| 458a0 | ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 9f 04 04 00 5a 77 53 65 74 44 65 66 61 75 6c 74 55 49 | ....d.?.yA!.......ZwSetDefaultUI |
| 458c0 | 4c 61 6e 67 75 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | Language.ntdll.dll..ntdll.dll/.. |
| 458e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 45900 | 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 | ....52........`.......d.?.yA.... |
| 45920 | a0 04 04 00 5a 77 53 65 74 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72 00 6e 74 64 6c 6c 2e | ....ZwSetDriverEntryOrder.ntdll. |
| 45940 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 45960 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a | ............0.......42........`. |
| 45980 | 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 a1 04 04 00 5a 77 53 65 74 45 61 46 69 6c 65 00 | ......d.?.yA........ZwSetEaFile. |
| 459a0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 459c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 | 2991..............0.......41.... |
| 459e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 a2 04 04 00 5a 77 53 65 74 45 | ....`.......d.?.yA........ZwSetE |
| 45a00 | 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | vent.ntdll.dll..ntdll.dll/...... |
| 45a20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 45a40 | 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 22 00 00 00 a3 04 04 00 | 54........`.......d.?.yA"....... |
| 45a60 | 5a 77 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 6f 72 69 74 79 00 6e 74 64 6c 6c 2e 64 6c | ZwSetEventBoostPriority.ntdll.dl |
| 45a80 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 45aa0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......49........`... |
| 45ac0 | ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 a4 04 04 00 5a 77 53 65 74 48 69 67 68 45 76 65 6e 74 | ....d.?.yA........ZwSetHighEvent |
| 45ae0 | 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Pair.ntdll.dll..ntdll.dll/...... |
| 45b00 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 45b20 | 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 a5 04 04 00 | 56........`.......d.?.yA$....... |
| 45b40 | 5a 77 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e | ZwSetHighWaitLowEventPair.ntdll. |
| 45b60 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 45b80 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a | ............0.......58........`. |
| 45ba0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 26 00 00 00 a6 04 04 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 | ......d.?.yA&.......ZwSetInforma |
| 45bc0 | 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | tionDebugObject.ntdll.dll.ntdll. |
| 45be0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 45c00 | 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......51........`.......d.?. |
| 45c20 | 79 41 1f 00 00 00 a7 04 04 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 6e | yA........ZwSetInformationFile.n |
| 45c40 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 45c60 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 | 2991..............0.......56.... |
| 45c80 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 a8 04 04 00 5a 77 53 65 74 49 | ....`.......d.?.yA$.......ZwSetI |
| 45ca0 | 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | nformationJobObject.ntdll.dll.nt |
| 45cc0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 45ce0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......50........`....... |
| 45d00 | 64 86 3f ac 79 41 1e 00 00 00 a9 04 04 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65 | d.?.yA........ZwSetInformationKe |
| 45d20 | 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | y.ntdll.dll.ntdll.dll/......1098 |
| 45d40 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 | 492991..............0.......53.. |
| 45d60 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 aa 04 04 00 5a 77 53 65 | ......`.......d.?.yA!.......ZwSe |
| 45d80 | 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | tInformationObject.ntdll.dll..nt |
| 45da0 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 45dc0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......54........`....... |
| 45de0 | 64 86 3f ac 79 41 22 00 00 00 ab 04 04 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 | d.?.yA".......ZwSetInformationPr |
| 45e00 | 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ocess.ntdll.dll.ntdll.dll/...... |
| 45e20 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 45e40 | 35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 ac 04 04 00 | 53........`.......d.?.yA!....... |
| 45e60 | 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c | ZwSetInformationThread.ntdll.dll |
| 45e80 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 45ea0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......52........`... |
| 45ec0 | ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 ad 04 04 00 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 | ....d.?.yA........ZwSetInformati |
| 45ee0 | 6f 6e 54 6f 6b 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | onToken.ntdll.dll.ntdll.dll/.... |
| 45f00 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 45f20 | 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 ae 04 | ..51........`.......d.?.yA...... |
| 45f40 | 04 00 5a 77 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c | ..ZwSetIntervalProfile.ntdll.dll |
| 45f60 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 45f80 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......48........`... |
| 45fa0 | ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 af 04 04 00 5a 77 53 65 74 49 6f 43 6f 6d 70 6c 65 74 | ....d.?.yA........ZwSetIoComplet |
| 45fc0 | 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ion.ntdll.dll.ntdll.dll/......10 |
| 45fe0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 | 98492991..............0.......46 |
| 46000 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 b0 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 46020 | 53 65 74 4c 64 74 45 6e 74 72 69 65 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | SetLdtEntries.ntdll.dll.ntdll.dl |
| 46040 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 46060 | 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......48........`.......d.?.yA |
| 46080 | 1c 00 00 00 b1 04 04 00 5a 77 53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e | ........ZwSetLowEventPair.ntdll. |
| 460a0 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 460c0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a | ............0.......56........`. |
| 460e0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 b2 04 04 00 5a 77 53 65 74 4c 6f 77 57 61 69 74 | ......d.?.yA$.......ZwSetLowWait |
| 46100 | 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | HighEventPair.ntdll.dll.ntdll.dl |
| 46120 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 46140 | 30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......56........`.......d.?.yA |
| 46160 | 24 00 00 00 b3 04 04 00 5a 77 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c | $.......ZwSetQuotaInformationFil |
| 46180 | 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | e.ntdll.dll.ntdll.dll/......1098 |
| 461a0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 | 492991..............0.......50.. |
| 461c0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 b4 04 04 00 5a 77 53 65 | ......`.......d.?.yA........ZwSe |
| 461e0 | 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | tSecurityObject.ntdll.dll.ntdll. |
| 46200 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 46220 | 20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......58........`.......d.?. |
| 46240 | 79 41 26 00 00 00 b5 04 04 00 5a 77 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 | yA&.......ZwSetSystemEnvironment |
| 46260 | 56 61 6c 75 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | Value.ntdll.dll.ntdll.dll/...... |
| 46280 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 462a0 | 36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 28 00 00 00 b6 04 04 00 | 60........`.......d.?.yA(....... |
| 462c0 | 5a 77 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 00 6e 74 | ZwSetSystemEnvironmentValueEx.nt |
| 462e0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 46300 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20 | 91..............0.......53...... |
| 46320 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 21 00 00 00 b7 04 04 00 5a 77 53 65 74 53 79 73 | ..`.......d.?.yA!.......ZwSetSys |
| 46340 | 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | temInformation.ntdll.dll..ntdll. |
| 46360 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 46380 | 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......52........`.......d.?. |
| 463a0 | 79 41 20 00 00 00 b8 04 04 00 5a 77 53 65 74 53 79 73 74 65 6d 50 6f 77 65 72 53 74 61 74 65 00 | yA........ZwSetSystemPowerState. |
| 463c0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 463e0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 | 2991..............0.......46.... |
| 46400 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 b9 04 04 00 5a 77 53 65 74 53 | ....`.......d.?.yA........ZwSetS |
| 46420 | 79 73 74 65 6d 54 69 6d 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ystemTime.ntdll.dll.ntdll.dll/.. |
| 46440 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 46460 | 20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 24 00 00 00 | ....56........`.......d.?.yA$... |
| 46480 | ba 04 04 00 5a 77 53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 61 74 65 00 6e 74 | ....ZwSetThreadExecutionState.nt |
| 464a0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 464c0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 | 91..............0.......41...... |
| 464e0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 bb 04 04 00 5a 77 53 65 74 54 69 6d | ..`.......d.?.yA........ZwSetTim |
| 46500 | 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | er.ntdll.dll..ntdll.dll/......10 |
| 46520 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 | 98492991..............0.......51 |
| 46540 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 bc 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 46560 | 53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | SetTimerResolution.ntdll.dll..nt |
| 46580 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 465a0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......44........`....... |
| 465c0 | 64 86 3f ac 79 41 18 00 00 00 bd 04 04 00 5a 77 53 65 74 55 75 69 64 53 65 65 64 00 6e 74 64 6c | d.?.yA........ZwSetUuidSeed.ntdl |
| 465e0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 46600 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 | ..............0.......44........ |
| 46620 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 be 04 04 00 5a 77 53 65 74 56 61 6c 75 65 | `.......d.?.yA........ZwSetValue |
| 46640 | 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | Key.ntdll.dll.ntdll.dll/......10 |
| 46660 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 | 98492991..............0.......57 |
| 46680 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 bf 04 04 00 5a 77 | ........`.......d.?.yA%.......Zw |
| 466a0 | 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 | SetVolumeInformationFile.ntdll.d |
| 466c0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 466e0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a | ............0.......47........`. |
| 46700 | 00 00 ff ff 00 00 64 86 3f ac 79 41 1b 00 00 00 c0 04 04 00 5a 77 53 68 75 74 64 6f 77 6e 53 79 | ......d.?.yA........ZwShutdownSy |
| 46720 | 73 74 65 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | stem.ntdll.dll..ntdll.dll/...... |
| 46740 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 46760 | 36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 29 00 00 00 c1 04 04 00 | 61........`.......d.?.yA)....... |
| 46780 | 5a 77 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 00 6e | ZwSignalAndWaitForSingleObject.n |
| 467a0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 467c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 | 2991..............0.......45.... |
| 467e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 c2 04 04 00 5a 77 53 74 61 72 | ....`.......d.?.yA........ZwStar |
| 46800 | 74 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | tProfile.ntdll.dll..ntdll.dll/.. |
| 46820 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 46840 | 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 | ....44........`.......d.?.yA.... |
| 46860 | c3 04 04 00 5a 77 53 74 6f 70 50 72 6f 66 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ....ZwStopProfile.ntdll.dll.ntdl |
| 46880 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 468a0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......47........`.......d. |
| 468c0 | 3f ac 79 41 1b 00 00 00 c4 04 04 00 5a 77 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 00 6e 74 64 | ?.yA........ZwSuspendProcess.ntd |
| 468e0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 46900 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20 | 91..............0.......46...... |
| 46920 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1a 00 00 00 c5 04 04 00 5a 77 53 75 73 70 65 6e | ..`.......d.?.yA........ZwSuspen |
| 46940 | 64 54 68 72 65 61 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | dThread.ntdll.dll.ntdll.dll/.... |
| 46960 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 46980 | 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 c6 04 | ..51........`.......d.?.yA...... |
| 469a0 | 04 00 5a 77 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c | ..ZwSystemDebugControl.ntdll.dll |
| 469c0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 469e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......51........`... |
| 46a00 | ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 c7 04 04 00 5a 77 54 65 72 6d 69 6e 61 74 65 4a 6f 62 | ....d.?.yA........ZwTerminateJob |
| 46a20 | 4f 62 6a 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Object.ntdll.dll..ntdll.dll/.... |
| 46a40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 46a60 | 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1d 00 00 00 c8 04 | ..49........`.......d.?.yA...... |
| 46a80 | 04 00 5a 77 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ..ZwTerminateProcess.ntdll.dll.. |
| 46aa0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 46ac0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......48........`..... |
| 46ae0 | 00 00 64 86 3f ac 79 41 1c 00 00 00 c9 04 04 00 5a 77 54 65 72 6d 69 6e 61 74 65 54 68 72 65 61 | ..d.?.yA........ZwTerminateThrea |
| 46b00 | 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | d.ntdll.dll.ntdll.dll/......1098 |
| 46b20 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 | 492991..............0.......42.. |
| 46b40 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 ca 04 04 00 5a 77 54 65 | ......`.......d.?.yA........ZwTe |
| 46b60 | 73 74 41 6c 65 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | stAlert.ntdll.dll.ntdll.dll/.... |
| 46b80 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 46ba0 | 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 cb 04 | ..43........`.......d.?.yA...... |
| 46bc0 | 04 00 5a 77 54 72 61 63 65 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ..ZwTraceEvent.ntdll.dll..ntdll. |
| 46be0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 46c00 | 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......50........`.......d.?. |
| 46c20 | 79 41 1e 00 00 00 cc 04 04 00 5a 77 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 00 6e 74 | yA........ZwTranslateFilePath.nt |
| 46c40 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 46c60 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 | 91..............0.......45...... |
| 46c80 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 19 00 00 00 cd 04 04 00 5a 77 55 6e 6c 6f 61 64 | ..`.......d.?.yA........ZwUnload |
| 46ca0 | 44 72 69 76 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | Driver.ntdll.dll..ntdll.dll/.... |
| 46cc0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 46ce0 | 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 ce 04 | ..42........`.......d.?.yA...... |
| 46d00 | 04 00 5a 77 55 6e 6c 6f 61 64 4b 65 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ..ZwUnloadKey.ntdll.dll.ntdll.dl |
| 46d20 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 46d40 | 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......43........`.......d.?.yA |
| 46d60 | 17 00 00 00 cf 04 04 00 5a 77 55 6e 6c 6f 61 64 4b 65 79 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a | ........ZwUnloadKey2.ntdll.dll.. |
| 46d80 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 46da0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......44........`..... |
| 46dc0 | 00 00 64 86 3f ac 79 41 18 00 00 00 d0 04 04 00 5a 77 55 6e 6c 6f 61 64 4b 65 79 45 78 00 6e 74 | ..d.?.yA........ZwUnloadKeyEx.nt |
| 46de0 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 46e00 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20 | 91..............0.......43...... |
| 46e20 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 d1 04 04 00 5a 77 55 6e 6c 6f 63 6b | ..`.......d.?.yA........ZwUnlock |
| 46e40 | 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | File.ntdll.dll..ntdll.dll/...... |
| 46e60 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 46e80 | 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 d2 04 04 00 | 52........`.......d.?.yA........ |
| 46ea0 | 5a 77 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ZwUnlockVirtualMemory.ntdll.dll. |
| 46ec0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 46ee0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......51........`..... |
| 46f00 | 00 00 64 86 3f ac 79 41 1f 00 00 00 d3 04 04 00 5a 77 55 6e 6d 61 70 56 69 65 77 4f 66 53 65 63 | ..d.?.yA........ZwUnmapViewOfSec |
| 46f20 | 74 69 6f 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | tion.ntdll.dll..ntdll.dll/...... |
| 46f40 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 46f60 | 34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 17 00 00 00 d4 04 04 00 | 43........`.......d.?.yA........ |
| 46f80 | 5a 77 56 64 6d 43 6f 6e 74 72 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ZwVdmControl.ntdll.dll..ntdll.dl |
| 46fa0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 46fc0 | 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......50........`.......d.?.yA |
| 46fe0 | 1e 00 00 00 d5 04 04 00 5a 77 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e 74 00 6e 74 64 6c | ........ZwWaitForDebugEvent.ntdl |
| 47000 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 47020 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 | ..............0.......50........ |
| 47040 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 d6 04 04 00 5a 77 57 61 69 74 46 6f 72 4b | `.......d.?.yA........ZwWaitForK |
| 47060 | 65 79 65 64 45 76 65 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | eyedEvent.ntdll.dll.ntdll.dll/.. |
| 47080 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 470a0 | 20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 23 00 00 00 | ....55........`.......d.?.yA#... |
| 470c0 | d7 04 04 00 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 6e 74 64 | ....ZwWaitForMultipleObjects.ntd |
| 470e0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 47100 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20 | 91..............0.......57...... |
| 47120 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 25 00 00 00 d8 04 04 00 5a 77 57 61 69 74 46 6f | ..`.......d.?.yA%.......ZwWaitFo |
| 47140 | 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 33 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | rMultipleObjects32.ntdll.dll..nt |
| 47160 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 47180 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......52........`....... |
| 471a0 | 64 86 3f ac 79 41 20 00 00 00 d9 04 04 00 5a 77 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a | d.?.yA........ZwWaitForSingleObj |
| 471c0 | 65 63 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ect.ntdll.dll.ntdll.dll/......10 |
| 471e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 | 98492991..............0.......50 |
| 47200 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 da 04 04 00 5a 77 | ........`.......d.?.yA........Zw |
| 47220 | 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | WaitHighEventPair.ntdll.dll.ntdl |
| 47240 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 47260 | 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......49........`.......d. |
| 47280 | 3f ac 79 41 1d 00 00 00 db 04 04 00 5a 77 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 00 6e | ?.yA........ZwWaitLowEventPair.n |
| 472a0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 472c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 | 2991..............0.......42.... |
| 472e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 dc 04 04 00 5a 77 57 72 69 74 | ....`.......d.?.yA........ZwWrit |
| 47300 | 65 46 69 6c 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | eFile.ntdll.dll.ntdll.dll/...... |
| 47320 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 47340 | 34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1c 00 00 00 dd 04 04 00 | 48........`.......d.?.yA........ |
| 47360 | 5a 77 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | ZwWriteFileGather.ntdll.dll.ntdl |
| 47380 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 473a0 | 20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......49........`.......d. |
| 473c0 | 3f ac 79 41 1d 00 00 00 de 04 04 00 5a 77 57 72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 00 6e | ?.yA........ZwWriteRequestData.n |
| 473e0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 47400 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 | 2991..............0.......51.... |
| 47420 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 df 04 04 00 5a 77 57 72 69 74 | ....`.......d.?.yA........ZwWrit |
| 47440 | 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | eVirtualMemory.ntdll.dll..ntdll. |
| 47460 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 47480 | 20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......47........`.......d.?. |
| 474a0 | 79 41 1b 00 00 00 e0 04 04 00 5a 77 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 00 6e 74 64 6c 6c | yA........ZwYieldExecution.ntdll |
| 474c0 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 474e0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20 | ..............0.......51........ |
| 47500 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1f 00 00 00 e1 04 04 00 5f 5f 43 5f 73 70 65 63 69 66 | `.......d.?.yA........__C_specif |
| 47520 | 69 63 5f 68 61 6e 64 6c 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ic_handler.ntdll.dll..ntdll.dll/ |
| 47540 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 47560 | 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 | ......39........`.......d.?.yA.. |
| 47580 | 00 00 e2 04 04 00 5f 5f 63 68 6b 73 74 6b 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ......__chkstk.ntdll.dll..ntdll. |
| 475a0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 475c0 | 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......40........`.......d.?. |
| 475e0 | 79 41 14 00 00 00 e3 04 04 00 5f 5f 69 73 61 73 63 69 69 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | yA........__isascii.ntdll.dll.nt |
| 47600 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 47620 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......39........`....... |
| 47640 | 64 86 3f ac 79 41 13 00 00 00 e4 04 04 00 5f 5f 69 73 63 73 79 6d 00 6e 74 64 6c 6c 2e 64 6c 6c | d.?.yA........__iscsym.ntdll.dll |
| 47660 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 47680 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......40........`... |
| 476a0 | ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 e5 04 04 00 5f 5f 69 73 63 73 79 6d 66 00 6e 74 64 6c | ....d.?.yA........__iscsymf.ntdl |
| 476c0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 476e0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20 | ..............0.......50........ |
| 47700 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 1e 00 00 00 e6 04 04 00 5f 5f 6d 69 73 61 6c 69 67 6e | `.......d.?.yA........__misalign |
| 47720 | 65 64 5f 61 63 63 65 73 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ed_access.ntdll.dll.ntdll.dll/.. |
| 47740 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 47760 | 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 | ....40........`.......d.?.yA.... |
| 47780 | e7 04 04 00 5f 5f 74 6f 61 73 63 69 69 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ....__toascii.ntdll.dll.ntdll.dl |
| 477a0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 477c0 | 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......38........`.......d.?.yA |
| 477e0 | 12 00 00 00 e8 04 04 00 5f 61 74 6f 69 36 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ........_atoi64.ntdll.dll.ntdll. |
| 47800 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 47820 | 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......39........`.......d.?. |
| 47840 | 79 41 13 00 00 00 e9 04 06 00 5f 66 6c 74 75 73 65 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | yA........_fltused.ntdll.dll..nt |
| 47860 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 47880 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......38........`....... |
| 478a0 | 64 86 3f ac 79 41 12 00 00 00 ea 04 04 00 5f 69 36 34 74 6f 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | d.?.yA........_i64toa.ntdll.dll. |
| 478c0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 478e0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......38........`..... |
| 47900 | 00 00 64 86 3f ac 79 41 12 00 00 00 eb 04 04 00 5f 69 36 34 74 6f 77 00 6e 74 64 6c 6c 2e 64 6c | ..d.?.yA........_i64tow.ntdll.dl |
| 47920 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 47940 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......36........`... |
| 47960 | ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 ec 04 04 00 5f 69 74 6f 61 00 6e 74 64 6c 6c 2e 64 6c | ....d.?.yA........_itoa.ntdll.dl |
| 47980 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 479a0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 36 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......36........`... |
| 479c0 | ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 ed 04 04 00 5f 69 74 6f 77 00 6e 74 64 6c 6c 2e 64 6c | ....d.?.yA........_itow.ntdll.dl |
| 479e0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 47a00 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......37........`... |
| 47a20 | ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 ee 04 04 00 5f 6c 66 69 6e 64 00 6e 74 64 6c 6c 2e 64 | ....d.?.yA........_lfind.ntdll.d |
| 47a40 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 47a60 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20 20 20 20 20 60 0a | ............0.......44........`. |
| 47a80 | 00 00 ff ff 00 00 64 86 3f ac 79 41 18 00 00 00 ef 04 04 00 5f 6c 6f 63 61 6c 5f 75 6e 77 69 6e | ......d.?.yA........_local_unwin |
| 47aa0 | 64 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | d.ntdll.dll.ntdll.dll/......1098 |
| 47ac0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 36 20 20 | 492991..............0.......36.. |
| 47ae0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 f0 04 04 00 5f 6c 74 6f | ......`.......d.?.yA........_lto |
| 47b00 | 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | a.ntdll.dll.ntdll.dll/......1098 |
| 47b20 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 36 20 20 | 492991..............0.......36.. |
| 47b40 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 f1 04 04 00 5f 6c 74 6f | ......`.......d.?.yA........_lto |
| 47b60 | 77 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | w.ntdll.dll.ntdll.dll/......1098 |
| 47b80 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 | 492991..............0.......39.. |
| 47ba0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 f2 04 04 00 5f 6d 65 6d | ......`.......d.?.yA........_mem |
| 47bc0 | 63 63 70 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ccpy.ntdll.dll..ntdll.dll/...... |
| 47be0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 47c00 | 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 f3 04 04 00 | 39........`.......d.?.yA........ |
| 47c20 | 5f 6d 65 6d 69 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | _memicmp.ntdll.dll..ntdll.dll/.. |
| 47c40 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 47c60 | 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 | ....38........`.......d.?.yA.... |
| 47c80 | f4 04 04 00 5f 73 65 74 6a 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ...._setjmp.ntdll.dll.ntdll.dll/ |
| 47ca0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 47cc0 | 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 | ......40........`.......d.?.yA.. |
| 47ce0 | 00 00 f5 04 04 00 5f 73 65 74 6a 6d 70 65 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ......_setjmpex.ntdll.dll.ntdll. |
| 47d00 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 47d20 | 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......40........`.......d.?. |
| 47d40 | 79 41 14 00 00 00 f6 04 04 00 5f 73 6e 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | yA........_snprintf.ntdll.dll.nt |
| 47d60 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 47d80 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......41........`....... |
| 47da0 | 64 86 3f ac 79 41 15 00 00 00 f7 04 04 00 5f 73 6e 77 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 | d.?.yA........_snwprintf.ntdll.d |
| 47dc0 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 47de0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a | ............0.......41........`. |
| 47e00 | 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 f8 04 04 00 5f 73 70 6c 69 74 70 61 74 68 00 6e | ......d.?.yA........_splitpath.n |
| 47e20 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 47e40 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 | 2991..............0.......39.... |
| 47e60 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 f9 04 04 00 5f 73 74 72 63 6d | ....`.......d.?.yA........_strcm |
| 47e80 | 70 69 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | pi.ntdll.dll..ntdll.dll/......10 |
| 47ea0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 | 98492991..............0.......39 |
| 47ec0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 fa 04 04 00 5f 73 | ........`.......d.?.yA........_s |
| 47ee0 | 74 72 69 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | tricmp.ntdll.dll..ntdll.dll/.... |
| 47f00 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 47f20 | 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 fb 04 | ..38........`.......d.?.yA...... |
| 47f40 | 04 00 5f 73 74 72 6c 77 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | .._strlwr.ntdll.dll.ntdll.dll/.. |
| 47f60 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 47f80 | 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 | ....40........`.......d.?.yA.... |
| 47fa0 | fc 04 04 00 5f 73 74 72 6e 69 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ...._strnicmp.ntdll.dll.ntdll.dl |
| 47fc0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 47fe0 | 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......38........`.......d.?.yA |
| 48000 | 12 00 00 00 fd 04 04 00 5f 73 74 72 75 70 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ........_strupr.ntdll.dll.ntdll. |
| 48020 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 48040 | 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......39........`.......d.?. |
| 48060 | 79 41 13 00 00 00 fe 04 04 00 5f 74 6f 6c 6f 77 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | yA........_tolower.ntdll.dll..nt |
| 48080 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 480a0 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......39........`....... |
| 480c0 | 64 86 3f ac 79 41 13 00 00 00 ff 04 04 00 5f 74 6f 75 70 70 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c | d.?.yA........_toupper.ntdll.dll |
| 480e0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 48100 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......39........`... |
| 48120 | ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 00 05 04 00 5f 75 69 36 34 74 6f 61 00 6e 74 64 6c 6c | ....d.?.yA........_ui64toa.ntdll |
| 48140 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 48160 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 | ..............0.......39........ |
| 48180 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 01 05 04 00 5f 75 69 36 34 74 6f 77 00 6e | `.......d.?.yA........_ui64tow.n |
| 481a0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 481c0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 | 2991..............0.......37.... |
| 481e0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 02 05 04 00 5f 75 6c 74 6f 61 | ....`.......d.?.yA........_ultoa |
| 48200 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 48220 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 | 492991..............0.......37.. |
| 48240 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 03 05 04 00 5f 75 6c 74 | ......`.......d.?.yA........_ult |
| 48260 | 6f 77 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ow.ntdll.dll..ntdll.dll/......10 |
| 48280 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32 | 98492991..............0.......42 |
| 482a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 16 00 00 00 04 05 04 00 5f 76 | ........`.......d.?.yA........_v |
| 482c0 | 73 63 77 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | scwprintf.ntdll.dll.ntdll.dll/.. |
| 482e0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 48300 | 20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 | ....41........`.......d.?.yA.... |
| 48320 | 05 05 04 00 5f 76 73 6e 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ...._vsnprintf.ntdll.dll..ntdll. |
| 48340 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 48360 | 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......42........`.......d.?. |
| 48380 | 79 41 16 00 00 00 06 05 04 00 5f 76 73 6e 77 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | yA........_vsnwprintf.ntdll.dll. |
| 483a0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 483c0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......39........`..... |
| 483e0 | 00 00 64 86 3f ac 79 41 13 00 00 00 07 05 04 00 5f 77 63 73 69 63 6d 70 00 6e 74 64 6c 6c 2e 64 | ..d.?.yA........_wcsicmp.ntdll.d |
| 48400 | 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | ll..ntdll.dll/......1098492991.. |
| 48420 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a | ............0.......38........`. |
| 48440 | 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 08 05 04 00 5f 77 63 73 6c 77 72 00 6e 74 64 6c | ......d.?.yA........_wcslwr.ntdl |
| 48460 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 48480 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 | ..............0.......40........ |
| 484a0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 14 00 00 00 09 05 04 00 5f 77 63 73 6e 69 63 6d 70 00 | `.......d.?.yA........_wcsnicmp. |
| 484c0 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 484e0 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20 | 2991..............0.......41.... |
| 48500 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 15 00 00 00 0a 05 04 00 5f 77 63 73 74 6f | ....`.......d.?.yA........_wcsto |
| 48520 | 75 69 36 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ui64.ntdll.dll..ntdll.dll/...... |
| 48540 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 48560 | 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 0b 05 04 00 | 38........`.......d.?.yA........ |
| 48580 | 5f 77 63 73 75 70 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | _wcsupr.ntdll.dll.ntdll.dll/.... |
| 485a0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 485c0 | 20 20 33 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 0c 05 | ..36........`.......d.?.yA...... |
| 485e0 | 04 00 5f 77 74 6f 69 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | .._wtoi.ntdll.dll.ntdll.dll/.... |
| 48600 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 48620 | 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 0d 05 | ..38........`.......d.?.yA...... |
| 48640 | 04 00 5f 77 74 6f 69 36 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | .._wtoi64.ntdll.dll.ntdll.dll/.. |
| 48660 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 48680 | 20 20 20 20 33 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 | ....36........`.......d.?.yA.... |
| 486a0 | 0e 05 04 00 5f 77 74 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ...._wtol.ntdll.dll.ntdll.dll/.. |
| 486c0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 486e0 | 20 20 20 20 33 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0e 00 00 00 | ....34........`.......d.?.yA.... |
| 48700 | 0f 05 04 00 61 62 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ....abs.ntdll.dll.ntdll.dll/.... |
| 48720 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 48740 | 20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0f 00 00 00 10 05 | ..35........`.......d.?.yA...... |
| 48760 | 04 00 61 74 61 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ..atan.ntdll.dll..ntdll.dll/.... |
| 48780 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 487a0 | 20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0f 00 00 00 11 05 | ..35........`.......d.?.yA...... |
| 487c0 | 04 00 61 74 6f 69 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ..atoi.ntdll.dll..ntdll.dll/.... |
| 487e0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 48800 | 20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0f 00 00 00 12 05 | ..35........`.......d.?.yA...... |
| 48820 | 04 00 61 74 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ..atol.ntdll.dll..ntdll.dll/.... |
| 48840 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 48860 | 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 13 05 | ..38........`.......d.?.yA...... |
| 48880 | 04 00 62 73 65 61 72 63 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ..bsearch.ntdll.dll.ntdll.dll/.. |
| 488a0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 488c0 | 20 20 20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0f 00 00 00 | ....35........`.......d.?.yA.... |
| 488e0 | 14 05 04 00 63 65 69 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ....ceil.ntdll.dll..ntdll.dll/.. |
| 48900 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 48920 | 20 20 20 20 33 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0e 00 00 00 | ....34........`.......d.?.yA.... |
| 48940 | 15 05 04 00 63 6f 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ....cos.ntdll.dll.ntdll.dll/.... |
| 48960 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 48980 | 20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0f 00 00 00 16 05 | ..35........`.......d.?.yA...... |
| 489a0 | 04 00 66 61 62 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ..fabs.ntdll.dll..ntdll.dll/.... |
| 489c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 489e0 | 20 20 33 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 17 05 | ..36........`.......d.?.yA...... |
| 48a00 | 04 00 66 6c 6f 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | ..floor.ntdll.dll.ntdll.dll/.... |
| 48a20 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 48a40 | 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 18 05 | ..38........`.......d.?.yA...... |
| 48a60 | 04 00 69 73 61 6c 6e 75 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ..isalnum.ntdll.dll.ntdll.dll/.. |
| 48a80 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 48aa0 | 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 | ....38........`.......d.?.yA.... |
| 48ac0 | 19 05 04 00 69 73 61 6c 70 68 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f | ....isalpha.ntdll.dll.ntdll.dll/ |
| 48ae0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 48b00 | 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 | ......38........`.......d.?.yA.. |
| 48b20 | 00 00 1a 05 04 00 69 73 63 6e 74 72 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c | ......iscntrl.ntdll.dll.ntdll.dl |
| 48b40 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 48b60 | 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......38........`.......d.?.yA |
| 48b80 | 12 00 00 00 1b 05 04 00 69 73 64 69 67 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ........isdigit.ntdll.dll.ntdll. |
| 48ba0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 48bc0 | 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......38........`.......d.?. |
| 48be0 | 79 41 12 00 00 00 1c 05 04 00 69 73 67 72 61 70 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c | yA........isgraph.ntdll.dll.ntdl |
| 48c00 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 48c20 | 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......38........`.......d. |
| 48c40 | 3f ac 79 41 12 00 00 00 1d 05 04 00 69 73 6c 6f 77 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ?.yA........islower.ntdll.dll.nt |
| 48c60 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 48c80 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......38........`....... |
| 48ca0 | 64 86 3f ac 79 41 12 00 00 00 1e 05 04 00 69 73 70 72 69 6e 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | d.?.yA........isprint.ntdll.dll. |
| 48cc0 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 48ce0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......38........`..... |
| 48d00 | 00 00 64 86 3f ac 79 41 12 00 00 00 1f 05 04 00 69 73 70 75 6e 63 74 00 6e 74 64 6c 6c 2e 64 6c | ..d.?.yA........ispunct.ntdll.dl |
| 48d20 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 48d40 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......38........`... |
| 48d60 | ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 20 05 04 00 69 73 73 70 61 63 65 00 6e 74 64 6c 6c 2e | ....d.?.yA........isspace.ntdll. |
| 48d80 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 48da0 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a | ............0.......38........`. |
| 48dc0 | 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 21 05 04 00 69 73 75 70 70 65 72 00 6e 74 64 6c | ......d.?.yA....!...isupper.ntdl |
| 48de0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 48e00 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 | ..............0.......39........ |
| 48e20 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 22 05 04 00 69 73 77 61 6c 70 68 61 00 6e | `.......d.?.yA...."...iswalpha.n |
| 48e40 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 48e60 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 | 2991..............0.......39.... |
| 48e80 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 23 05 04 00 69 73 77 63 74 79 | ....`.......d.?.yA....#...iswcty |
| 48ea0 | 70 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | pe.ntdll.dll..ntdll.dll/......10 |
| 48ec0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 | 98492991..............0.......39 |
| 48ee0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 24 05 04 00 69 73 | ........`.......d.?.yA....$...is |
| 48f00 | 77 64 69 67 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | wdigit.ntdll.dll..ntdll.dll/.... |
| 48f20 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 48f40 | 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 25 05 | ..39........`.......d.?.yA....%. |
| 48f60 | 04 00 69 73 77 6c 6f 77 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ..iswlower.ntdll.dll..ntdll.dll/ |
| 48f80 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 48fa0 | 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 | ......39........`.......d.?.yA.. |
| 48fc0 | 00 00 26 05 04 00 69 73 77 73 70 61 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ..&...iswspace.ntdll.dll..ntdll. |
| 48fe0 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 49000 | 20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......40........`.......d.?. |
| 49020 | 79 41 14 00 00 00 27 05 04 00 69 73 77 78 64 69 67 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | yA....'...iswxdigit.ntdll.dll.nt |
| 49040 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 49060 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......39........`....... |
| 49080 | 64 86 3f ac 79 41 13 00 00 00 28 05 04 00 69 73 78 64 69 67 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c | d.?.yA....(...isxdigit.ntdll.dll |
| 490a0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 490c0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......35........`... |
| 490e0 | ff ff 00 00 64 86 3f ac 79 41 0f 00 00 00 29 05 04 00 6c 61 62 73 00 6e 74 64 6c 6c 2e 64 6c 6c | ....d.?.yA....)...labs.ntdll.dll |
| 49100 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 49120 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 34 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......34........`... |
| 49140 | ff ff 00 00 64 86 3f ac 79 41 0e 00 00 00 2a 05 04 00 6c 6f 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | ....d.?.yA....*...log.ntdll.dll. |
| 49160 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 49180 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......38........`..... |
| 491a0 | 00 00 64 86 3f ac 79 41 12 00 00 00 2b 05 04 00 6c 6f 6e 67 6a 6d 70 00 6e 74 64 6c 6c 2e 64 6c | ..d.?.yA....+...longjmp.ntdll.dl |
| 491c0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 491e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......39........`... |
| 49200 | ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 2c 05 04 00 6d 62 73 74 6f 77 63 73 00 6e 74 64 6c 6c | ....d.?.yA....,...mbstowcs.ntdll |
| 49220 | 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | .dll..ntdll.dll/......1098492991 |
| 49240 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 | ..............0.......37........ |
| 49260 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 2d 05 04 00 6d 65 6d 63 68 72 00 6e 74 64 | `.......d.?.yA....-...memchr.ntd |
| 49280 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 492a0 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 | 91..............0.......37...... |
| 492c0 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 2e 05 04 00 6d 65 6d 63 6d 70 00 6e | ..`.......d.?.yA........memcmp.n |
| 492e0 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 49300 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 | 2991..............0.......37.... |
| 49320 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 2f 05 04 00 6d 65 6d 63 70 79 | ....`.......d.?.yA..../...memcpy |
| 49340 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 49360 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 | 492991..............0.......38.. |
| 49380 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 30 05 04 00 6d 65 6d 6d | ......`.......d.?.yA....0...memm |
| 493a0 | 6f 76 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ove.ntdll.dll.ntdll.dll/......10 |
| 493c0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 | 98492991..............0.......37 |
| 493e0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 31 05 04 00 6d 65 | ........`.......d.?.yA....1...me |
| 49400 | 6d 73 65 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | mset.ntdll.dll..ntdll.dll/...... |
| 49420 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 49440 | 33 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0e 00 00 00 32 05 04 00 | 34........`.......d.?.yA....2... |
| 49460 | 70 6f 77 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | pow.ntdll.dll.ntdll.dll/......10 |
| 49480 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 36 | 98492991..............0.......36 |
| 494a0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 10 00 00 00 33 05 04 00 71 73 | ........`.......d.?.yA....3...qs |
| 494c0 | 6f 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ort.ntdll.dll.ntdll.dll/......10 |
| 494e0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 34 | 98492991..............0.......34 |
| 49500 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0e 00 00 00 34 05 04 00 73 69 | ........`.......d.?.yA....4...si |
| 49520 | 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | n.ntdll.dll.ntdll.dll/......1098 |
| 49540 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 | 492991..............0.......38.. |
| 49560 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 35 05 04 00 73 70 72 69 | ......`.......d.?.yA....5...spri |
| 49580 | 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | ntf.ntdll.dll.ntdll.dll/......10 |
| 495a0 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 35 | 98492991..............0.......35 |
| 495c0 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0f 00 00 00 36 05 04 00 73 71 | ........`.......d.?.yA....6...sq |
| 495e0 | 72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | rt.ntdll.dll..ntdll.dll/......10 |
| 49600 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 | 98492991..............0.......37 |
| 49620 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 37 05 04 00 73 73 | ........`.......d.?.yA....7...ss |
| 49640 | 63 61 6e 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | canf.ntdll.dll..ntdll.dll/...... |
| 49660 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 49680 | 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 38 05 04 00 | 37........`.......d.?.yA....8... |
| 496a0 | 73 74 72 63 61 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | strcat.ntdll.dll..ntdll.dll/.... |
| 496c0 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 496e0 | 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 39 05 | ..37........`.......d.?.yA....9. |
| 49700 | 04 00 73 74 72 63 68 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ..strchr.ntdll.dll..ntdll.dll/.. |
| 49720 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 49740 | 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 | ....37........`.......d.?.yA.... |
| 49760 | 3a 05 04 00 73 74 72 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | :...strcmp.ntdll.dll..ntdll.dll/ |
| 49780 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 497a0 | 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 | ......37........`.......d.?.yA.. |
| 497c0 | 00 00 3b 05 04 00 73 74 72 63 70 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ..;...strcpy.ntdll.dll..ntdll.dl |
| 497e0 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 49800 | 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......38........`.......d.?.yA |
| 49820 | 12 00 00 00 3c 05 04 00 73 74 72 63 73 70 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e | ....<...strcspn.ntdll.dll.ntdll. |
| 49840 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 49860 | 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......37........`.......d.?. |
| 49880 | 79 41 11 00 00 00 3d 05 04 00 73 74 72 6c 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | yA....=...strlen.ntdll.dll..ntdl |
| 498a0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 498c0 | 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......38........`.......d. |
| 498e0 | 3f ac 79 41 12 00 00 00 3e 05 04 00 73 74 72 6e 63 61 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 | ?.yA....>...strncat.ntdll.dll.nt |
| 49900 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 49920 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......38........`....... |
| 49940 | 64 86 3f ac 79 41 12 00 00 00 3f 05 04 00 73 74 72 6e 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | d.?.yA....?...strncmp.ntdll.dll. |
| 49960 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 49980 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......38........`..... |
| 499a0 | 00 00 64 86 3f ac 79 41 12 00 00 00 40 05 04 00 73 74 72 6e 63 70 79 00 6e 74 64 6c 6c 2e 64 6c | ..d.?.yA....@...strncpy.ntdll.dl |
| 499c0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 499e0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......38........`... |
| 49a00 | ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 41 05 04 00 73 74 72 70 62 72 6b 00 6e 74 64 6c 6c 2e | ....d.?.yA....A...strpbrk.ntdll. |
| 49a20 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 49a40 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a | ............0.......38........`. |
| 49a60 | 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 42 05 04 00 73 74 72 72 63 68 72 00 6e 74 64 6c | ......d.?.yA....B...strrchr.ntdl |
| 49a80 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 49aa0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 | ..............0.......37........ |
| 49ac0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 43 05 04 00 73 74 72 73 70 6e 00 6e 74 64 | `.......d.?.yA....C...strspn.ntd |
| 49ae0 | 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | ll.dll..ntdll.dll/......10984929 |
| 49b00 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 | 91..............0.......37...... |
| 49b20 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 44 05 04 00 73 74 72 73 74 72 00 6e | ..`.......d.?.yA....D...strstr.n |
| 49b40 | 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | tdll.dll..ntdll.dll/......109849 |
| 49b60 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 | 2991..............0.......37.... |
| 49b80 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 45 05 04 00 73 74 72 74 6f 6c | ....`.......d.?.yA....E...strtol |
| 49ba0 | 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | .ntdll.dll..ntdll.dll/......1098 |
| 49bc0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 | 492991..............0.......38.. |
| 49be0 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 46 05 04 00 73 74 72 74 | ......`.......d.?.yA....F...strt |
| 49c00 | 6f 75 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | oul.ntdll.dll.ntdll.dll/......10 |
| 49c20 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39 | 98492991..............0.......39 |
| 49c40 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 47 05 04 00 73 77 | ........`.......d.?.yA....G...sw |
| 49c60 | 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | printf.ntdll.dll..ntdll.dll/.... |
| 49c80 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 49ca0 | 20 20 33 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 0e 00 00 00 48 05 | ..34........`.......d.?.yA....H. |
| 49cc0 | 04 00 74 61 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | ..tan.ntdll.dll.ntdll.dll/...... |
| 49ce0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 49d00 | 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 49 05 04 00 | 38........`.......d.?.yA....I... |
| 49d20 | 74 6f 6c 6f 77 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | tolower.ntdll.dll.ntdll.dll/.... |
| 49d40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 49d60 | 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 4a 05 | ..38........`.......d.?.yA....J. |
| 49d80 | 04 00 74 6f 75 70 70 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 | ..toupper.ntdll.dll.ntdll.dll/.. |
| 49da0 | 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 | ....1098492991..............0... |
| 49dc0 | 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 | ....39........`.......d.?.yA.... |
| 49de0 | 4b 05 04 00 74 6f 77 6c 6f 77 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | K...towlower.ntdll.dll..ntdll.dl |
| 49e00 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 49e20 | 30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......39........`.......d.?.yA |
| 49e40 | 13 00 00 00 4c 05 04 00 74 6f 77 75 70 70 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | ....L...towupper.ntdll.dll..ntdl |
| 49e60 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 49e80 | 20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......42........`.......d. |
| 49ea0 | 3f ac 79 41 16 00 00 00 4d 05 04 00 76 44 62 67 50 72 69 6e 74 45 78 00 6e 74 64 6c 6c 2e 64 6c | ?.yA....M...vDbgPrintEx.ntdll.dl |
| 49ec0 | 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | l.ntdll.dll/......1098492991.... |
| 49ee0 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......52........`... |
| 49f00 | ff ff 00 00 64 86 3f ac 79 41 20 00 00 00 4e 05 04 00 76 44 62 67 50 72 69 6e 74 45 78 57 69 74 | ....d.?.yA....N...vDbgPrintExWit |
| 49f20 | 68 50 72 65 66 69 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | hPrefix.ntdll.dll.ntdll.dll/.... |
| 49f40 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 49f60 | 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 4f 05 | ..39........`.......d.?.yA....O. |
| 49f80 | 04 00 76 73 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ..vsprintf.ntdll.dll..ntdll.dll/ |
| 49fa0 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 49fc0 | 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 | ......37........`.......d.?.yA.. |
| 49fe0 | 00 00 50 05 04 00 77 63 73 63 61 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c | ..P...wcscat.ntdll.dll..ntdll.dl |
| 4a000 | 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | l/......1098492991.............. |
| 4a020 | 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 | 0.......37........`.......d.?.yA |
| 4a040 | 11 00 00 00 51 05 04 00 77 63 73 63 68 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e | ....Q...wcschr.ntdll.dll..ntdll. |
| 4a060 | 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 | dll/......1098492991............ |
| 4a080 | 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac | ..0.......37........`.......d.?. |
| 4a0a0 | 79 41 11 00 00 00 52 05 04 00 77 63 73 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c | yA....R...wcscmp.ntdll.dll..ntdl |
| 4a0c0 | 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 | l.dll/......1098492991.......... |
| 4a0e0 | 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 | ....0.......37........`.......d. |
| 4a100 | 3f ac 79 41 11 00 00 00 53 05 04 00 77 63 73 63 70 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 | ?.yA....S...wcscpy.ntdll.dll..nt |
| 4a120 | 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 | dll.dll/......1098492991........ |
| 4a140 | 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 | ......0.......38........`....... |
| 4a160 | 64 86 3f ac 79 41 12 00 00 00 54 05 04 00 77 63 73 63 73 70 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | d.?.yA....T...wcscspn.ntdll.dll. |
| 4a180 | 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 | ntdll.dll/......1098492991...... |
| 4a1a0 | 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff | ........0.......37........`..... |
| 4a1c0 | 00 00 64 86 3f ac 79 41 11 00 00 00 55 05 04 00 77 63 73 6c 65 6e 00 6e 74 64 6c 6c 2e 64 6c 6c | ..d.?.yA....U...wcslen.ntdll.dll |
| 4a1e0 | 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 | ..ntdll.dll/......1098492991.... |
| 4a200 | 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 | ..........0.......38........`... |
| 4a220 | ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 56 05 04 00 77 63 73 6e 63 61 74 00 6e 74 64 6c 6c 2e | ....d.?.yA....V...wcsncat.ntdll. |
| 4a240 | 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 | dll.ntdll.dll/......1098492991.. |
| 4a260 | 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a | ............0.......38........`. |
| 4a280 | 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 57 05 04 00 77 63 73 6e 63 6d 70 00 6e 74 64 6c | ......d.?.yA....W...wcsncmp.ntdl |
| 4a2a0 | 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 | l.dll.ntdll.dll/......1098492991 |
| 4a2c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 | ..............0.......38........ |
| 4a2e0 | 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 58 05 04 00 77 63 73 6e 63 70 79 00 6e 74 | `.......d.?.yA....X...wcsncpy.nt |
| 4a300 | 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 32 39 | dll.dll.ntdll.dll/......10984929 |
| 4a320 | 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20 | 91..............0.......38...... |
| 4a340 | 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 59 05 04 00 77 63 73 70 62 72 6b 00 | ..`.......d.?.yA....Y...wcspbrk. |
| 4a360 | 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 34 39 | ntdll.dll.ntdll.dll/......109849 |
| 4a380 | 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20 | 2991..............0.......38.... |
| 4a3a0 | 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 00 00 5a 05 04 00 77 63 73 72 63 68 | ....`.......d.?.yA....Z...wcsrch |
| 4a3c0 | 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 38 | r.ntdll.dll.ntdll.dll/......1098 |
| 4a3e0 | 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20 | 492991..............0.......37.. |
| 4a400 | 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 5b 05 04 00 77 63 73 73 | ......`.......d.?.yA....[...wcss |
| 4a420 | 70 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 | pn.ntdll.dll..ntdll.dll/......10 |
| 4a440 | 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 37 | 98492991..............0.......37 |
| 4a460 | 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 5c 05 04 00 77 63 | ........`.......d.?.yA....\...wc |
| 4a480 | 73 73 74 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 | sstr.ntdll.dll..ntdll.dll/...... |
| 4a4a0 | 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 | 1098492991..............0....... |
| 4a4c0 | 33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 11 00 00 00 5d 05 04 00 | 37........`.......d.?.yA....]... |
| 4a4e0 | 77 63 73 74 6f 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 | wcstol.ntdll.dll..ntdll.dll/.... |
| 4a500 | 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 | ..1098492991..............0..... |
| 4a520 | 20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 13 00 00 00 5e 05 | ..39........`.......d.?.yA....^. |
| 4a540 | 04 00 77 63 73 74 6f 6d 62 73 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f | ..wcstombs.ntdll.dll..ntdll.dll/ |
| 4a560 | 20 20 20 20 20 20 31 30 39 38 34 39 32 39 39 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 | ......1098492991..............0. |
| 4a580 | 20 20 20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 64 86 3f ac 79 41 12 00 | ......38........`.......d.?.yA.. |
| 4a5a0 | 00 00 5f 05 04 00 77 63 73 74 6f 75 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 | .._...wcstoul.ntdll.dll. |
 |
index : miranda-ng.git | |
| miranda-ng main repo mirror (manuall sync only) |
| summaryrefslogtreecommitdiff |
blob: 48b01b5d03cea09c7e560e7d9608c525958974bb (plain)